CVE-2026-71805 | LZ-litchi 1.0.0 upload directory unrestricted upload

A vulnerability categorized as critical has been discovered in LZ-litchi 1.0.0. Affected is an unknown function of the file /app-api/infra/file/upload. Such manipulation of the argument directory leads to unrestricted upload.

This vulnerability is documented as CVE-2026-71805. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More