Medium severityNVD Advisory· Published Jun 1, 2026· Updated Jun 1, 2026

CVE-2026-40547

Description

SOPlanning is vulnerable to Path Traversal in backup endpoints. Authenticated remote attacker is able to exploit a vulnerable endpoint and construct payloads that allow reading and executing files previously added through the backup functionality. Critically, due to CVE-2026-40543 (Missing Authorization), any backup file can be read by any (unauthorized) user.

This issue affects SOPlanning version 1.55 and below.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Soplanning/Soplanningllm-fuzzy
Range: <=1.55

Patches

Vulnerability mechanics

References

cert.pl/en/posts/2026/06/CVE-2026-40543nvd
www.soplanning.org/en/nvd

News mentions

Soplanning: Seven Vulnerabilities Disclosed, Including SQLi and Auth Bypass
Vypr Intelligence · Jun 1, 2026

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000