CVE-2026-75799

Summary

The flaw allows unauthenticated attackers to write arbitrary PHP files on the server, leading to Remote Code Execution (RCE) when the caching feature is enabled.

Exploitability

Exploitation is relatively straightforward as it requires only enabling the caching feature and uploading a malicious PHP file.

Blast radius

If exploited, the impact is critical as it can lead to full server compromise and unauthorized execution of arbitrary code.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 0.9.31 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.