Directory Traversal Vulnerability in Cloud Commander by Coderaiser
CVE-2026-82460
9.3CRITICAL
What is CVE-2026-82460?
A vulnerability exists in Cloud Commander versions prior to 19.20.2, where insufficient path normalization in REST file-operation and markdown endpoints allows attackers to exploit directory traversal sequences. This flaw could enable unauthorized access, allowing malicious users to read, write, move, or copy files outside the designated root directory, exposing sensitive information and compromising system integrity.
Affected Version(s)
cloudcmd 0 < 19.20.2
