CVE-2026-5258 in Sanster IOPaintinformação

Sumário (Inglês)

A vulnerability was found in Sanster IOPaint 1.5.3. Impacted is the function _get_file of the file iopaint/file_manager/file_manager.py of the component File Manager. Performing a manipulation of the argument filename results in path traversal. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Divulgação

01/04/2026

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
354448	Sanster IOPaint File Manager file_manager.py _get_file Travessia de Diretório	22	Prova de conceito	Não definido	CVE-2026-5258

Descrição

CPE

CWE

CVSS

Explorações

História

Diferença

Relacionar

Inteligência de ameaças

API JSON

API XML

API CSV

◂ VoltarVisão GeralPróximo ▸

Interested in the pricing of exploits?

See the underground prices here!