Path Traversal Vulnerability in RansomLook API

CVE-2026-78381

What is CVE-2026-78381?

RansomLook contains a vulnerability in the path handling of the screen field related to group posts. An attacker can manipulate the screen field, allowing for the inclusion of traversal sequences that lead to unauthorized file access. This occurs when the GroupPost.get API handler appends the database-controlled screen value to the application's directory path, enabling the reading of sensitive files such as configuration data and API credentials. The flaw is indicative of inadequate input validation and file path resolution, necessitating remediation through improved path verification methods.

References