CVE-2026-88394 | WookTeam up to 1.6.6 Project Task Export Endpoint /api/project/task/export storage_path data/file path traversal

October 5, 2026 Yanac

A vulnerability identified as problematic has been detected in WookTeam up to 1.6.6. Affected by this vulnerability is the function storage_path of the file /api/project/task/export of the component Project Task Export Endpoint. This manipulation of the argument data/file causes path traversal.

This vulnerability is handled as CVE-2026-88394. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More