lsegal yard up to 0.9.41 path traversal

Summaryinfo

A vulnerability classified as critical has been found in lsegal yard up to 0.9.41. Impacted is an unknown function. The manipulation leads to path traversal. This vulnerability is documented as CVE-2026-41493. The attack can be initiated remotely. There is not any exploit available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as critical, has been found in lsegal yard up to 0.9.41. This issue affects some unknown processing. The manipulation with an unknown input leads to a path traversal vulnerability. Using CWE to declare the problem leads to CWE-22. The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. Impacted is confidentiality. The summary by CVE is:

YARD is a Ruby Documentation tool. Prior to version 0.9.42, a path traversal vulnerability was discovered in YARD when using yard server to serve documentation. This bug would allow unsanitized HTTP requests to access arbitrary files on the machine of a yard server host under certain conditions. This issue has been patched in version 0.9.42.

The advisory is shared at github.com. The identification of this vulnerability is CVE-2026-41493 since 04/20/2026. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Neither technical details nor an exploit are publicly available. MITRE ATT&CK project uses the attack technique T1006 for this issue.

The vulnerability scanner Nessus provides a plugin with the ID 313606 (Linux Distros Unpatched Vulnerability : CVE-2026-41493), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 0.9.42 eliminates this vulnerability.

The vulnerability is also documented in the databases at Tenable (313606) and CERT Bund (WID-SEC-2026-2117). Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Affected

• Red Hat Enterprise Linux
• RESF Rocky Linux
• HCL BigFix
• Oracle Linux

Productinfo

Vendor

• lsegal

Name

• yard

Version

• 0.9.0
• 0.9.1
• 0.9.2
• 0.9.3
• 0.9.4
• 0.9.5
• 0.9.6
• 0.9.7
• 0.9.8
• 0.9.9
• 0.9.10
• 0.9.11
• 0.9.12
• 0.9.13
• 0.9.14
• 0.9.15
• 0.9.16
• 0.9.17
• 0.9.18
• 0.9.19
• 0.9.20
• 0.9.21
• 0.9.22
• 0.9.23
• 0.9.24
• 0.9.25
• 0.9.26
• 0.9.27
• 0.9.28
• 0.9.29
• 0.9.30
• 0.9.31
• 0.9.32
• 0.9.33
• 0.9.34
• 0.9.35
• 0.9.36
• 0.9.37
• 0.9.38
• 0.9.39
• 0.9.40
• 0.9.41

Website

• Product: https://github.com/lsegal/yard/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion