CVE-2026-57567 | Readest up to 0.11.9 File Transfer transfer_file.rs download_file/upload_file file_path path traversal

A vulnerability was found in Readest up to 0.11.9. It has been declared as critical. The impacted element is the function download_file/upload_file of the file apps/readest-app/src-tauri/src/transfer_file.rs of the component File Transfer. The manipulation of the argument file_path results in path traversal.

This vulnerability is reported as CVE-2026-57567. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More