CVE-2026-10073: Interinfo｜DreamMaker - Arbitrary File Read
Published May 29, 2026
·Updated
DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing unauthenticated local attackers to exploit Relative Path Traversal to download arbitrary system files.
Affected Software
1 affected component
Interinfo DreamMaker
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
DreamMaker (Interinfo) - Java Composerto a version that resolves this vulnerability.Fixed in 2.3
Event History
May 29, 2026
CVE Published
via MITRE·12:39 PM
Data Sourced
via MITRE·12:39 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·02:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-10073?
The severity of CVE-2026-10073 is rated high, with a score of 8.7.
2
What type of vulnerability is CVE-2026-10073?
CVE-2026-10073 is classified as an Arbitrary File Read vulnerability due to Path Traversal.
3
Who is affected by CVE-2026-10073?
CVE-2026-10073 affects users of the Interinfo DreamMaker software.
4
How do I fix CVE-2026-10073?
To fix CVE-2026-10073, update to Java Composer version 2.3 or later.
5
What can an attacker achieve with CVE-2026-10073?
An unauthenticated local attacker can exploit CVE-2026-10073 to download arbitrary system files.