CVE-2026-119145 | Frappe up to 15.120.x/16.33.x File Upload path traversal

October 29, 2026 Yanac

A vulnerability labeled as critical has been found in Frappe up to 15.120.x/16.33.x. Impacted is an unknown function of the component File Upload. Executing a manipulation can lead to path traversal.

This vulnerability is registered as CVE-2026-119145. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More