CVE-2026-55836 | Open Zaak up to 1.27.1/1.28.1 documenten tasks.py _import_document_row bestandspad path traversal (EUVD-2026-102900)

October 16, 2026 Yanac

A vulnerability identified as problematic has been detected in Open Zaak up to 1.27.1/1.28.1. Affected by this vulnerability is the function _import_document_row of the file src/openzaak/components/documenten/tasks.py of the component documenten. Performing a manipulation of the argument bestandspad results in path traversal.

This vulnerability is identified as CVE-2026-55836. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More