Path Traversal Vulnerability in Kodcloud KodExplorer Affecting Public Share Functionality

CVE-2026-6568

What is CVE-2026-6568?

A vulnerability exists in Kodcloud KodExplorer versions up to 4.52, specifically in the Public Share Handler's initShareOld function within share.class.php. This weakness is due to improper handling of the argument path, allowing an attacker to perform path traversal attacks. Such an exploit can be executed remotely, potentially enabling unauthorized access to file system directories. Despite early disclosure efforts to inform the vendor, there has been no response or remediation provided.

References