Critical severity9.9NVD Advisory· Published Oct 15, 2026
CVE-2026-105037
CVE-2026-105037
Description
EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 allow any registered, low-privilege account to read arbitrary files from the server by supplying an attacker-controlled file path. This exposes middleware files and server secrets.
Affected products
1- Range: 1.6.5 - 1.8.2
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.