CVE-2026-102598 | Pallets Werkzeug up to 3.1.8 Windows Device Name safe_join path traversal

September 29, 2026 Yanac

A vulnerability was found in Pallets Werkzeug up to 3.1.8. It has been classified as critical. The impacted element is the function safe_join of the component Windows Device Name Handler. This manipulation causes path traversal.

This vulnerability is handled as CVE-2026-102598. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More