CVE-2026-118756 | gopasspw gopass up to 1.16.x Filesystem Storage Backend Prune/IsDir path traversal

October 29, 2026 Yanac

A vulnerability was found in gopasspw gopass up to 1.16.x and classified as problematic. The affected element is the function Prune/IsDir of the component Filesystem Storage Backend. Executing a manipulation can lead to path traversal.

This vulnerability is handled as CVE-2026-118756. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More