TI-2026-70101 CVE-2026-108158 · GHSA-7jr3-j3rm-rx7w
Path traversal in plugNmeet Server lets participants read files
Priority MEDIUM 64
plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows any meeting participant to read server files via crafted filePath values.