Critical severity9.8NVD Advisory· Published Aug 29, 2026
CVE-2026-82460
CVE-2026-82460
Description
Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Attackers can use path traversal sequences to read, write, move, or copy files outside the configured root directory.
Affected products
1- Range: <19.20.2
Patches
Vulnerability mechanics
References
5- github.com/coderaiser/cloudcmd/blob/v19.20.1/server/root.jsnvd
- github.com/coderaiser/cloudcmd/commit/b9bdc9ed528350eeb2f9ef974c18998096fae919nvd
- github.com/coderaiser/cloudcmd/issues/474nvd
- github.com/coderaiser/cloudcmd/releases/tag/v19.20.2nvd
- www.vulncheck.com/advisories/cloud-commander-before-19.20.2-directory-traversal-via-rest-and-markdownnvd
News mentions
0No linked articles in our index yet.