Path Traversal Vulnerability in Omnispace Agora Project

CVE-2026-63162

What is CVE-2026-63162?

The Omnispace Agora Project prior to version 26.10.0 is susceptible to a path traversal vulnerability. By manipulating the tmpFolderName parameter in the upload path, an attacker can exploit this vulnerability to write arbitrary files outside the designated temporary directory. This could allow for unauthorized file access or potential remote code execution. Proper input validation and path sanitization are crucial to mitigate this risk.

References