Path Traversal Vulnerability in Bleenco Abstruse Cache Endpoint
CVE-2026-108772

6.9MEDIUM

Key Information:

Vendor: Bleenco
Status: Abstruse
Vendor: CVE Published:; 11 October 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-108772?

A vulnerability exists in the Bleenco Abstruse product that affects the Cache Endpoint, specifically within the filepath.Join function found in server/api/worker/download_cache.go. The flaw allows an attacker to manipulate the input arguments, potentially leading to unauthorized access to sensitive files through path traversal techniques. This issue can be exploited remotely, posing a considerable risk to the integrity of the system. Despite early notification to Bleenco regarding this security vulnerability, there has been no public acknowledgment or response from the vendor.

Affected Version(s)

abstruse 2.0

abstruse 2.1.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-108772 - Proof of Concept