Path Traversal Vulnerability in CherryTree by Giuspen

CVE-2026-118693

What is CVE-2026-118693?

CherryTree versions up to 1.7.2 are susceptible to a path traversal vulnerability found in the CtStorageXmlHelper::_create_image_from_xml function. The vulnerability arises from the software's reliance on unvalidated 'filename' attributes within XML documents. By crafting specially formatted .ctd, .ctz, or .ctx files that include absolute paths or user directory references, an attacker could manipulate the application to embed sensitive files, such as SSH private keys, without proper authorization. This poses serious security risks as it may lead to unauthorized file access and data exposure.

References