Path Traversal Vulnerability in rConfig by Rconfig

CVE-2026-77914

What is CVE-2026-77914?

The rConfig application prior to version 8.2.13 is susceptible to a path traversal vulnerability that enables authenticated users to access sensitive files outside the intended export directory. By manipulating the filename parameter during an export download, attackers can exploit directory traversal sequences to bypass security controls and read arbitrary files that the application can access. This vulnerability poses significant risks, as it can potentially expose confidential information stored on the server.

References