CVE-2026-6815 — CVE-2026-6815

Description (CNA)

An arbitrary file write vulnerability exists in Casdoor's Local File System storage provider. Due to insufficient path sanitization, an authenticated attacker with administrative privileges can perform a Path Traversal attack to create or overwrite arbitrary files anywhere on the host filesystem, bypassing the application's intended storage sandbox.

Affected (CNA)

Vendor / product	Versions
Casdoor / Casdoor	affected 0 through v2.328.0

CWE

No CWE identifiers supplied.

References

https://kb.cert.org/vuls/id/937808

ADP enrichment

CVE

No English description supplied.

https://www.kb.cert.org/vuls/id/937808

CISA-ADP

No English description supplied.

No references supplied.