CVE-2026-61654 | Lightdash up to 0.3213.0 Webhook projectController.ts testWebhook accountId/runId path traversal

SecurityVulns
Yanac

A vulnerability labeled as critical has been found in Lightdash up to 0.3213.0. This affects the function testWebhook of the file packages/backend/src/controllers/projectController.ts of the component Webhook. Executing a manipulation of the argument accountId/runId can lead to path traversal.

This vulnerability appears as CVE-2026-61654. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More