Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
10.0
Daptin Allows Unauthenticated File Writing and Code Execution
published 6 months ago
Summary
An attacker can upload files to any location on the server without being authorized, potentially allowing them to write malicious code. This can happen because Daptin doesn't check the file paths properly. To protect your system, update to the latest version of Daptin or restrict access to the file upload feature until a patch is available.
What to do
- Update github.com daptin to version 0.12.0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| go | github.com | daptin |
<= 0.11.3 Fix: upgrade to 0.12.0
|
Original advisory text
Daptin has Unauthenticated Path Traversal and Zip Slip
### Impact
The `cloudstore.file.upload` action in `server/actions/action_cloudstore_file_upload.go` writes user-supplied filenames directly to disk without proper validation.
This allows unauthenticated attackers to perform path traversal and zip slip attacks, leading to arbitrary file write and potential remote code execution.
**CVSS Score:** 10.0 Critical
**CVSS Vector:** CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H
**CWE:** CWE-22 (Path Traversal)
### Patches
Upgrade to a patched version once released. The vulnerability affects all versions <= v0.11.3 (latest).
### Workarounds
Restrict access to the cloudstore.file.upload action through authentication and authorization controls until a patch is available.
The `cloudstore.file.upload` action in `server/actions/action_cloudstore_file_upload.go` writes user-supplied filenames directly to disk without proper validation.
This allows unauthenticated attackers to perform path traversal and zip slip attacks, leading to arbitrary file write and potential remote code execution.
**CVSS Score:** 10.0 Critical
**CVSS Vector:** CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H
**CWE:** CWE-22 (Path Traversal)
### Patches
Upgrade to a patched version once released. The vulnerability affects all versions <= v0.11.3 (latest).
### Workarounds
Restrict access to the cloudstore.file.upload action through authentication and authorization controls until a patch is available.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-22Path Traversal
Timeline
Published10 Apr 2026
Updated10 Apr 2026
First seen10 Apr 2026
Sources
GHSA-9cp7-j3f8-p5jx · GHSA
Track software like this
Free during beta