CVE-2026-105037: EnergizeLab Station Middleware Authenticated Path Traversal Arbitrary File Read
EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 allow any registered, low-privilege account to read arbitrary files from the server by supplying an attacker-controlled file path. This exposes middleware files and server secrets.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
Any registered account with low privileges can exploit it. The attacker does not need user interaction, but does need network access to the affected service and valid account credentials.
Which deployments are affected?
EnergizeLab station-middleware NestJS Docker images from 1.6.5 through 1.8.2 are affected. The provided data does not identify a configuration prerequisite, so deployments running those image versions should be treated as exposed.
What could an attacker access?
An attacker can supply a controlled file path to read arbitrary files from the server. This can expose middleware files and server secrets.