CVE-2026-123619 | Lektor up to 3.3.14/3.4.0b15 Admin API cleanup_path path traversal

November 6, 2026 Yanac

A vulnerability classified as critical has been found in Lektor up to 3.3.14/3.4.0b15. Affected is the function cleanup_path of the component Admin API. The manipulation leads to path traversal.

This vulnerability is traded as CVE-2026-123619. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More