← CVE Radar
CVE-2026-92812Decap CMS < 3.11.0 Path Traversal via Sibling Directory Prefix Matching
Decap CMS before 3.11.0 contains a path traversal vulnerability in the local proxy containment guard that uses plain string prefix comparison without path separator validation. Attackers can access sibling directories whose names begin with the repository directory name to read, write, or delete files outside the intended repository root.
9.3 CRITICALEPSS 0.44%Not in KEVNVD: Deferred
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.3 | CRITICAL | 4.0VulnCheck (CNA) | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
| 9.8 | CRITICAL | 3.1VulnCheck (CNA) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Details
- CVE ID
- CVE-2026-92812
- Status
- Deferred
- Assigner (CNA)
- VulnCheck
- Published
- Sep 16, 2026
- Last modified
- 2026-10-28 19:05 UTC
- Weaknesses
- CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected Products
As published by the CNA in the CVE record.
decaporgdecap-cms1 version range
- before 3.11.0
References
- github.com https://github.com/decaporg/decap-cms/releases?page=2#[email protected]
- github.com https://github.com/decaporg/decap-cms/security/advisories/GHSA-5rrq-v82w-qpfr
- github.com https://github.com/geo-chen/oss/blob/main/decap-cms.md
- vulncheck.com https://www.vulncheck.com/advisories/decap-cms-path-traversal-via-sibling-directory-prefix-matching