colanode

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

colanode records in CISA KEV

No colanode vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-74425 CVE-2026-110766

Path traversal in Colanode Server lets users read other workspaces' avatars

MEDIUM 57

Colanode server through 0.4.7 contains a path traversal vulnerability that allows authenticated users to read arbitrary .jpeg files by supplying an encoded traversal sequence in avatarId.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00286 Published 2026-10-14 No fix listed CWE-22

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0