CVE-2026-114376 | leomoon-studios wiki-go up to 1.9.1 API editor.go SaveHandler/SourceHandler path traversal (GHSA-wv68-7fq9-834c)

October 21, 2026 Yanac

A vulnerability classified as critical was found in leomoon-studios wiki-go up to 1.9.1. Affected by this vulnerability is the function SaveHandler/SourceHandler of the file internal/handlers/editor.go of the component API. Executing a manipulation can lead to path traversal.

This vulnerability is tracked as CVE-2026-114376. The attack can be launched remotely. Moreover, an exploit is present.

Upgrading the affected component is advised.VulDB Recent EntriesRead More