CVE-2026-75418 in Lektor
Résumé
par MITRE • 28/08/2026
A path traversal vulnerability exists in the built-in preview/development web server of Lektor <3.3.14 on Windows. An attacker with network access to the server can send a crafted HTTP request containing path traversal sequences to read arbitrary files accessible to the process, disclosing sensitive information such as system files and deployment configuration files containing credentials.
VulDB is the best source for vulnerability data and more expert information about this specific topic.