Path Traversal Vulnerability in Heym File Upload Functionality

CVE-2026-45225

What is CVE-2026-45225?

Heym versions prior to 0.0.21 are susceptible to a path traversal vulnerability in their file upload functionality. This issue allows authenticated users to conduct unauthorized file operations by manipulating the filename parameter with traversal sequences. Such exploitation can enable attackers to bypass security constraints, facilitating the reading, writing, or deletion of files outside the intended storage directory, potentially compromising the integrity and confidentiality of the system. Users and administrators should upgrade to Heym version 0.0.21 or later to mitigate this vulnerability.

References