CVE-2026-114377 | leomoon-studios wiki-go up to 1.9.1 Comment Deletion comments.go DeleteComment documentPath path traversal (GHSA-g86r-58wp-4v86)

October 21, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in leomoon-studios wiki-go up to 1.9.1. Affected by this issue is the function DeleteComment of the file internal/comments/comments.go of the component Comment Deletion Handler. The manipulation of the argument documentPath leads to path traversal.

This vulnerability is listed as CVE-2026-114377. The attack may be initiated remotely. In addition, an exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More