CVE-2026-106560 | Backstage up to 0.3.24 Scaffolder Backend path traversal

October 7, 2026 Yanac

A vulnerability classified as problematic was found in Backstage up to 0.3.24. Affected by this vulnerability is an unknown functionality of the component Scaffolder Backend Module. Executing a manipulation can lead to path traversal.

This vulnerability is registered as CVE-2026-106560. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More