Path Traversal Vulnerability in Detect-It-Easy Software by Horsicq

CVE-2026-43616

What is CVE-2026-43616?

Detect-It-Easy, an application developed by Horsicq, has a vulnerability that enables attackers to perform path traversal, subsequently allowing them to write arbitrary files to the system's filesystem. This weakness arises from inadequate path normalization during the extraction of malicious archive entries, which can utilize either relative or absolute paths. By exploiting this vulnerability, attackers have the potential to write files outside the designated extraction directory, creating the risk of persistent code execution by overwriting essential user startup scripts.

References