CVE-2026-97232: volotat Anagnorisis page.html start_streaming path traversal
A vulnerability was determined in volotat Anagnorisis up to 0.4.2. Affected by this vulnerability is the function getfilecontent/savefilecontent/movefiles/startstreaming of the file page.html. This manipulation causes path traversal. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Which deployments are known to be affected?
volotat Anagnorisis versions up to and including 0.4.2 are identified as affected. The provided information does not establish whether any later version is fixed.
What level of access does an attacker need?
The issue can be initiated remotely, but the CVSS vector indicates low privileges are required. No user interaction is required.
What impact could successful exploitation have?
The CVSS assessment indicates low impact to confidentiality, integrity, and availability. The affected file operations include reading, saving, moving, and streaming files, and the flaw is classified as path traversal.
Is public exploitation information available?
Yes. The exploit has been publicly disclosed and may be used.
Is a vendor fix or response available?
The vendor was contacted early about the disclosure but did not respond. The supplied information does not identify a patch or workaround.