CVE-2026-71215

7.5 HIGHpublic exploit available

Published 2026-08-05 · Updated 2026-08-10

AI risk analysis

Summary: The flaw allows path traversal by not validating the resolved file path after using path.resolve, potentially leading to unauthorized access or execution of files.
Exploitability: Exploitation requires control over template filenames and knowledge of the root directory structure; moderate difficulty.
Blast radius: If exploited, it could lead to data exposure or code execution on the server hosting the affected application.
Prioritized remediation: Implement path validation checks after resolving the file path to ensure it remains within the intended root directory.

rcepath-traversalwebtemplate-injection

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

art-template's sub-template resolution logic (src/compile/adapter/resolve-filename.js), used by both the include and extend template directives, resolves the target file path via path.resolve(root, filename) with no check afterward that the result remains inside root.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses

CWE-22

Public exploit & PoC references

https://github.com/aui/art-template

All references

https://github.com/aui/art-template

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.