CVE-2026-123807 | SignalK Server/resources-provider FileStore filestorage.ts FileStore.getResource resourceId path traversal

November 9, 2026 Yanac

A vulnerability classified as critical was found in SignalK Server and resources-provider. The affected element is the function FileStore.getResource of the file packages/resources-provider-plugin/src/filestorage.ts of the component FileStore. Executing a manipulation of the argument resourceId can lead to path traversal.

The identification of this vulnerability is CVE-2026-123807. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More