Directory Traversal Vulnerability in Cloud Commander by Coderaiser
CVE-2026-82460

9.3CRITICAL

Key Information:

Vendor

Coderaiser

Status
Vendor
CVE Published:
29 August 2026

What is CVE-2026-82460?

A vulnerability exists in Cloud Commander versions prior to 19.20.2, where insufficient path normalization in REST file-operation and markdown endpoints allows attackers to exploit directory traversal sequences. This flaw could enable unauthorized access, allowing malicious users to read, write, move, or copy files outside the designated root directory, exposing sensitive information and compromising system integrity.

Affected Version(s)

cloudcmd 0 < 19.20.2

References

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dilipkumar Choudhary
.