CVE-2026-62092

Summary

Armania versions 1.4.8 and earlier contain a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files on the server. This flaw enables attackers to access sensitive data and potentially escalate privileges by including local files.

Exploitability

Exploitation requires sending a crafted request to the vulnerable endpoint, but no authentication is needed, making it relatively easy to exploit with minimal preconditions.

Blast radius

The vulnerability could lead to widespread data exposure across the affected system, potentially allowing attackers to access configuration files, user credentials, and other sensitive server-side resources.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Armania version 1.5.0 or later to remediate this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.