Critical severity9.1NVD Advisory· Published Aug 10, 2026· Updated Aug 10, 2026
CVE-2026-72569
CVE-2026-72569
Description
A path traversal vulnerability in cube-root/directory-serve through 1.3.7 allows an unauthenticated remote attacker to delete arbitrary files outside the intended served directory when the application is run with the --delete option.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=1.3.7
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.