File Read Vulnerability in EnergizeLab NestJS Middleware Docker Images

CVE-2026-105037

What is CVE-2026-105037?

A vulnerability in EnergizeLab's station-middleware Docker images versions 1.6.5 to 1.8.2 allows low-privilege users to exploit the server by reading arbitrary files. By providing an attacker-controlled file path, these users can gain access to sensitive middleware files and potential server secrets, leading to serious security risks for the system.

References