Path Traversal Vulnerability in Readest E-book Reader Affects User Data Integrity

CVE-2026-57565

What is CVE-2026-57565?

Readest, a comprehensive e-book reading application, has a vulnerability in its API that allows authenticated users to manipulate file paths through client-controlled inputs. This oversight enables an attacker to construct a malicious object key, potentially overwriting or corrupting another user's stored book data. By exploiting this flaw, the attacker can escape the designated namespace on the R2 backend, compromising file metadata integrity. The issue was resolved in version 0.11.10, emphasizing the importance of updating to maintain data security and user trust.

References