CVE-2026-62069

Summary

The Fabius application suffers from an unauthenticated Local File Inclusion vulnerability that allows attackers to read arbitrary files on the server. This is particularly dangerous because no authentication is required to exploit it, making it a high-severity issue.

Exploitability

Exploitation requires sending a crafted request to the vulnerable endpoint with a file path parameter, but no authentication or user interaction is needed once the target is identified.

Blast radius

If exploited, attackers could access sensitive server files including configuration data, database credentials, and potentially application source code, leading to further compromise of the affected system.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Fabius version 1.1 or later to address this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.