CVE-2026-33588
Arbitrary File Write Through Path Traversal
- State
- Published
- Severity
- 7.0 High
- Published
- May 7, 2026
- Updated
- May 7, 2026
- Reserved
- Mar 23, 2026
Description
Lack of user input validation in the file upload functionality of Open Notebook v1.8.3 allows the application user to create or modify files on the docker container via path traversal.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 7.0 High | CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N | ENISA |
Weaknesses
- CWE-20 Improper input validation
Affected Products
| Product | Versions |
|---|---|
Open NotebookOpen Notebook |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.