CVE-2026-102810: Marmite through 0.4.2 Path Traversal via Development Server

Q: Which deployments are exposed to this issue?

Instances running Marmite through 0.4.2 with the development server started using --serve are exposed. The issue is reachable over the network and does not require authentication.

Q: What does an attacker need to do to exploit it?

An attacker needs network access to the development server and can send a request containing percent-encoded directory traversal sequences. No privileges or user interaction are required.

Q: What could an attacker access?

An attacker may read arbitrary files that are readable by the Marmite process. The vulnerability affects confidentiality; the provided data does not indicate file modification or service disruption.

Q: How can I determine whether my environment is affected?

Check whether Marmite version 0.4.2 or earlier is running with the --serve development-server option and is accessible to untrusted network clients. Such deployments should be treated as vulnerable because encoded traversal paths are not rejected after decoding.

Published Sep 29, 2026

Updated

Marmite through 0.4.2 contains a path traversal vulnerability in the development server started by --serve that allows unauthenticated attackers to read arbitrary files. The handlerequest function in src/server.rs fails to reject .. segments after percent-decoding and joining the request path to the output folder, enabling attackers to request encoded traversal sequences to access files readable by the marmite process.

Affected Software

1 affected component

Marmite Marmite<=0.4.2

Event History

Sep 29, 2026

CVE Published

via MITRE·05:22 PM

Data Sourced

via MITRE·05:22 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are exposed to this issue?

Instances running Marmite through 0.4.2 with the development server started using --serve are exposed. The issue is reachable over the network and does not require authentication.

What does an attacker need to do to exploit it?

An attacker needs network access to the development server and can send a request containing percent-encoded directory traversal sequences. No privileges or user interaction are required.

What could an attacker access?

An attacker may read arbitrary files that are readable by the Marmite process. The vulnerability affects confidentiality; the provided data does not indicate file modification or service disruption.

How can I determine whether my environment is affected?

Check whether Marmite version 0.4.2 or earlier is running with the --serve development-server option and is accessible to untrusted network clients. Such deployments should be treated as vulnerable because encoded traversal paths are not rejected after decoding.

CVE-2026-102810: Marmite through 0.4.2 Path Traversal via Development Server

Affected Software

Event History

Frequently Asked Questions

Which deployments are exposed to this issue?

What does an attacker need to do to exploit it?

What could an attacker access?

How can I determine whether my environment is affected?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed to this issue?

What does an attacker need to do to exploit it?

What could an attacker access?

How can I determine whether my environment is affected?