CVE-2026-52875 | truelockmc Streambert up to 2.5.x IPC src/ipc/storage.js perform-scheduled-backup path path traversal

August 18, 2026 Yanac

A vulnerability, which was classified as critical, has been found in truelockmc Streambert up to 2.5.x. This impacts the function perform-scheduled-backup of the file src/ipc/storage.js of the component IPC Handler. This manipulation of the argument path causes path traversal.

This vulnerability is handled as CVE-2026-52875. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More