TI-2026-64681 CVE-2026-100520 · GHSA-7q7h-5g76-8cq4
Laranode before 1.2.1 Path Traversal in File Manager Upload Endpoint
Priority MEDIUM 42
Laranode versions before 1.2.1 contain a path traversal vulnerability in the POST /filemanager/upload-file endpoint that allows authenticated users to write arbitrary files outside their home directory.