CVE-2026-118693 | giuspen CherryTree up to 1.7.2 XML Helper _create_image_from_xml filename path traversal

October 29, 2026 Yanac

A vulnerability classified as problematic was found in giuspen CherryTree up to 1.7.2. This affects the function CtStorageXmlHelper::_create_image_from_xml of the component XML Helper. The manipulation of the argument filename results in path traversal.

This vulnerability is reported as CVE-2026-118693. The attack requires a local approach. No exploit exists.VulDB Recent EntriesRead More