Path Traversal Vulnerability in Rust OneNote File Parser for Microsoft OneNote

CVE-2026-46671

What is CVE-2026-46671?

The Rust OneNote File Parser is susceptible to a significant vulnerability that allows a crafted .onetoc2 file to manipulate file paths outside the intended directory. This occurs when the parser processes entry names from the .onetoc2 file without properly validating the paths, potentially leading to probing for sensitive file existence. Although direct data exfiltration is limited, the risk of denial-of-service attacks through large or specially crafted files remains. Users are advised to upgrade to version 1.1.1, which tightly restricts path inputs by rejecting absolute paths and parent-directory components. For those unable to update, it is crucial to parse .onetoc2 files exclusively from trusted sources to mitigate risks.

References