CVE-2026-105314

Summary

Papermerge 3.5.3 contains a directory traversal vulnerability in its document upload API that allows authenticated users to write arbitrary Python code files to the application's site-packages directory, enabling remote code execution when the Python interpreter restarts. This represents a significant security risk as it can be exploited by standard users without elevated privileges.

Exploitability

Exploitation requires an authenticated user account and is moderately difficult due to the need for precise directory traversal payload construction, but becomes more feasible with public exploit references available.

Blast radius

If exploited, this vulnerability could allow attackers to execute arbitrary code on the Papermerge server with the privileges of the application process, potentially leading to full system compromise or data exfiltration across all documents managed by the application.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Papermerge 3.5.4 or later to address this directory traversal vulnerability in the document upload API.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.