Path Traversal Vulnerability in MP Manager by Abdurazaaq Mohammed

CVE-2026-110235

What is CVE-2026-110235?

MP Manager versions up to 1.1.0 contain a path traversal vulnerability that enables attackers to exploit the app's archive extraction functionality. By bypassing the sanitizeEntryName filter, an attacker can craft malicious entries in archive files such as TAR, 7z, or RAR, which allows them to manipulate file paths. This results in the potential for unauthorized file creation or overwriting in locations on shared storage that the application can access. Users of MP Manager should take immediate steps to secure their installations and follow best practices to prevent exploitation.

References