CVE-2026-42269 | Countly Server up to 24.05.49/25.03.43 Data Migration api.js clean_up_data exportid path traversal

October 16, 2026 Yanac

A vulnerability was found in Countly Server up to 24.05.49/25.03.43. It has been classified as problematic. This affects the function clean_up_data of the file plugins/data_migration/api/api.js of the component Data Migration. Performing a manipulation of the argument exportid results in path traversal.

This vulnerability is known as CVE-2026-42269. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More