CVE-2026-116067

HIGH

Paisa before 0.7.8 contains a path traversal vulnerability in the GetFile, GetSheet, DeleteBackups, and DeleteSheetBackups handlers that lets unauthenticated attackers read files and delete backups through ../ sequences in file names. Attackers can send crafted names to the editor file and delete_backups endpoints to read any server-readable file and remove backup files outside the journal or sheets directory.

CVSS v3.1 Score

8.2
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
LOW
Availability
NONE
Published: 10/25/2026Modified: 10/29/2026

Related Intelligence (1)

HIGHVulnerability

NVD HIGH: CVE-2026-116067 — Paisa before 0.7.8 contains a path traversal vulnerability in the GetFile, GetSh...

Paisa before 0.7.8 contains a path traversal vulnerability in the GetFile, GetSheet, DeleteBackups, and DeleteSheetBackups handlers that lets unauthenticated attackers read files and delete backups through ../ sequences in file names. Attackers can send crafted names to the editor file and delete_backups endpoints to read any server-readable file and remove backup files outside the journal or shee

CVE-2026-116067
NIST NVD

References (6)

https://github.com/ananthakumaran/paisahttps://github.com/ananthakumaran/paisa/blob/v0.7.7/internal/server/editor.go#L49-L70https://github.com/ananthakumaran/paisa/commit/035949351f7c0d0f90ecf767aa1e28b4d5a0ae31https://github.com/ananthakumaran/paisa/issues/420https://github.com/ananthakumaran/paisa/releases/tag/v0.7.8https://www.vulncheck.com/advisories/paisa-before-0.7.8-path-traversal-via-editor-and-sheet-api