{"id":"CVE-2026-67200","published":"2026-08-04T15:16:40.717","lastModified":"2026-08-05T14:17:09.207","description":"Perspective 5.0.0 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files from the server filesystem by including literal ../ segments in HTTP request URL paths. Attackers can bypass the insufficient query-string-stripping sanitization to traverse outside the configured asset root directory and retrieve sensitive files such as system credentials and application secrets, with results exposed cross-origin due to a wildcard Access-Control-Allow-Origin header set on all responses.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwes":["CWE-22"],"vendors":[],"products":[],"references":[{"url":"https://christbowel.com/blog/perspective-5-0-0-five-cves/","tags":[]},{"url":"https://www.vulncheck.com/advisories/perspective-path-traversal-via-cwd-static-file-handler","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw allows unauthenticated attackers to read arbitrary files from the server filesystem by manipulating HTTP request paths, potentially exposing sensitive information.","exploitability":"Exploitation is relatively easy as it requires only URL manipulation and no authentication; preconditions include the presence of vulnerable file paths in the asset root directory.","blast_radius":"If exploited, this vulnerability could lead to significant data breaches, including system credentials and application secrets being exposed cross-origin.","remediation":"Update Perspective to a non-vulnerable version or patch the path traversal vulnerability by properly sanitizing input and restricting file access paths.","tags":["path-traversal","file-read","web","auth-bypass"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-08-11T06:53:58.020Z"}}