CVE-2026-79318 | web2py 3.2.2-stable webservices.py read_file/write_file path traversal

A vulnerability labeled as critical has been found in web2py 3.2.2-stable. The impacted element is the function read_file/write_file of the file applications/admin/controllers/webservices.py. Executing a manipulation can lead to path traversal.

This vulnerability is registered as CVE-2026-79318. It is possible to launch the attack remotely. No exploit is available.

A patch should be applied to remediate this issue.VulDB Recent EntriesRead More