Read the docs

Fonoster

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Fonoster records in CISA KEV

No Fonoster vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-55450 CVE-2026-80209 · GHSA-xqrc-3jm3-hm6q

Fonoster through 0.22.7 Incorrect Authorization in the Identity UpdateWorkspace Handler

Priority MEDIUM 57

The updateWorkspace handler in mods/identity/src/workspaces/createUpdateWorkspace.ts in Fonoster through 0.22.7 invokes the gRPC callback with PERMISSION_DENIED when createIsWorkspaceMember reports that the caller is not…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00391 Published 2026-08-27 No fix listed CWE-863
TI-2024-28730 CVE-2024-43035 · GHSA-9fv2-c7v6-p45w

Path traversal in Fonoster

Priority LOW 37

Fonoster 0.5.5 before 0.6.1 allows ../ directory traversal to read arbitrary files via the /sounds/:file or /tts/:file VoiceServer endpoint.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.02398 Published 2026-03-05 Fixed in 0.6.1 CWE-24
Open these records in search →