CVE-2026-27897 | WanderingAstronomer Vociferous up to 4.4.1 src/api/system.py export_file path traversal

March 11, 2026 Yanac

A vulnerability marked as critical has been reported in WanderingAstronomer Vociferous up to 4.4.1. This issue affects the function export_file of the file src/api/system.py. This manipulation causes path traversal.

This vulnerability is handled as CVE-2026-27897. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More