Path Traversal Vulnerability in Roundcube Webmail by Roundcube
CVE-2026-114714
5.3MEDIUM
What is CVE-2026-114714?
A path traversal vulnerability exists in Roundcube Webmail versions prior to 1.6.20 and 1.7.x before 1.7.5 due to improper handling of login names in the squirrelmail_usercopy plugin. The vulnerability allows a specially crafted login name containing a slash to bypass directory restrictions, potentially enabling attackers to read and import files located outside the designated squirrelmail_data_dir. A recent upstream update addressed this issue by implementing validation to reject such malicious login names.
Affected Version(s)
Webmail 1.6.0 < 1.6.20
Webmail 1.7.0 < 1.7.5