Exploitable File Access in art-template by AUI

CVE-2026-71215

What is CVE-2026-71215?

The vulnerability in art-template arises from improper handling of sub-template resolution logic, where the system fails to validate file paths after resolution. This allows attackers to exploit the system by providing controlled input, leading to unauthorized access and potential reading of sensitive files on the file system. The flaw is primarily due to the lack of safeguards against absolute paths and directory traversal sequences, which may enable malicious actors to access files beyond the intended directory.

References