CVE-2026-119298 | schollz croc up to 11.5.1 Receive File src/croc/croc.go recipientInitializeFile input validation

October 30, 2026 Yanac

A vulnerability labeled as problematic has been found in schollz croc up to 11.5.1. This affects the function recipientInitializeFile of the file src/croc/croc.go of the component Receive File Handler. The manipulation results in improper input validation.

This vulnerability is reported as CVE-2026-119298. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More