CVE-2026-108980 | Blinko up to 1.8.8 Plugin Install plugin.ts installPlugin name path traversal

October 12, 2026 Yanac

A vulnerability has been found in Blinko up to 1.8.8 and classified as very critical. The impacted element is the function installPlugin of the file server/routerTrpc/plugin.ts of the component Plugin Install. This manipulation of the argument Name causes path traversal.

This vulnerability is tracked as CVE-2026-108980. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More