CVE-2026-6057: Unauthenticated Path Traversal in FalkorDB Browser Leads to Remote Code Execution
Published Apr 10, 2026
·Updated
FalkorDB Browser 1.9.3 contains an unauthenticated path traversal vulnerability in the file upload API that allows remote attackers to write arbitrary files and achieve remote code execution.
Affected Software
1 affected component
FalkorDB FalkorDB Browser=1.9.3
Event History
Apr 10, 2026
CVE Published
via MITRE·09:16 AM
Data Sourced
via MITRE·09:16 AM
DescriptionWeakness
Data Sourced
via NVD·10:16 AM
DescriptionSeverityWeakness
Jan 3, 58252
Event
via FIRST·02:44 AM
Frequently Asked Questions
1
What is the severity of CVE-2026-6057?
CVE-2026-6057 has a critical severity rating of 9.8.
2
What vulnerability is described in CVE-2026-6057?
CVE-2026-6057 describes an unauthenticated path traversal vulnerability in the file upload API of FalkorDB Browser.
3
How can CVE-2026-6057 be exploited?
CVE-2026-6057 can be exploited by remote attackers to write arbitrary files and achieve remote code execution.
4
What version of FalkorDB is affected by CVE-2026-6057?
FalkorDB Browser version 1.9.3 is affected by CVE-2026-6057.
5
How do I fix CVE-2026-6057?
To fix CVE-2026-6057, it is recommended to update FalkorDB Browser to a version that addresses this vulnerability.