CVE-2026-113505
CVE-2026-113505 · aaPanel Download Endpoint v2.py send_file path traversal
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A flaw has been found in aaPanel up to 8.25.0. Impacted is the function send_file of the file BTPanel/routes/v2.py of the component Download Endpoint. Executing a manipulation of the argument filename can lead to path traversal. The attack can be executed remotely. The exploit has been published and may be used. The vendor confirms: "The reported RCE and LFI vulnerabilities require authentication."
CVSS 5.3 · Medium · EPSS 0.5%
- Published
- Updated
Affected products and versions
aapanel
- Versions
- 8.0: Affected
- 8.1: Affected
- 8.2: Affected
- 8.3: Affected
- 8.4: Affected
- 8.5: Affected
- 8.6: Affected
- 8.7: Affected
- 8.8: Affected
- 8.9: Affected
- 8.10: Affected
- 8.11: Affected
- 8.12: Affected
- 8.13: Affected
- 8.14: Affected
- 8.15: Affected
- 8.16: Affected
- 8.17: Affected
- 8.18: Affected
- 8.19: Affected
- 8.20: Affected
- 8.21: Affected
- 8.22: Affected
- 8.23: Affected
- 8.24: Affected
- 8.25.0: Affected
No fix published