CVE-2026-105125 | LaraDashboard up to 1.4.7 composer.json lang path traversal

October 4, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in LaraDashboard up to 1.4.7. Affected is an unknown function of the file composer.json. Performing a manipulation of the argument lang results in path traversal.

This vulnerability is cataloged as CVE-2026-105125. It is possible to initiate the attack remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More