Path Traversal Vulnerability in Coursevault-Preview by Moritz Myrz

CVE-2026-35613

What is CVE-2026-35613?

The coursevault-preview utility allows users to preview course material files from a defined directory. However, prior to version 0.1.1, it contains a path traversal vulnerability in the 'resolveSafe' method. This flaw arises from an inadequate boundary check that relies on String.prototype.startsWith(baseDir), failing to properly restrict file access to the designated directory. An attacker can exploit this vulnerability by manipulating the relativePath argument, potentially granting unauthorized access to files outside of the baseDir, especially if a sibling directory's name shares a common prefix. Users are advised to upgrade to version 0.1.1 or later to mitigate this risk.

References