CVE-2026-85684 | datalab-to marker up to 2.0.0 Upload /marker/upload file.filename path traversal

September 4, 2026 Yanac

A vulnerability, which was classified as critical, has been found in datalab-to marker up to 2.0.0. The affected element is an unknown function of the file /marker/upload of the component Upload Handler. This manipulation of the argument file.filename causes path traversal.

This vulnerability appears as CVE-2026-85684. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More