Path Traversal and Local File Inclusion Vulnerability in Frappe Framework

CVE-2026-41482

What is CVE-2026-41482?

In the Frappe framework, a security vulnerability was identified in the Chrome PDF Generator feature prior to version 16.18.3, allowing path traversal and local file inclusion. This could enable unauthorized access to sensitive files on the server, presenting a significant risk to the integrity and confidentiality of data. The issue was mitigated by a patch in the latest release, ensuring that secure local resource access is properly handled. Users are strongly encouraged to update to version 16.18.3 or later to protect against this vulnerability.

References