CVE-2026-114375 | leomoon-studios wiki-go up to 1.9.1 Files Rename API files.go RenameFileHandler currentPath/newName path traversal (GHSA-xg75-vx57-m5mx)

SecurityVulns
Yanac

A vulnerability classified as critical has been found in leomoon-studios wiki-go up to 1.9.1. Affected is the function RenameFileHandler of the file internal/handlers/files.go of the component Files Rename API. Performing a manipulation of the argument currentPath/newName results in path traversal.

This vulnerability is identified as CVE-2026-114375. The attack can be initiated remotely. Additionally, an exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More