TI-2026-50830 CVE-2026-72572 · GHSA-9pgj-cxw3-gw33
o1lab xmysql - Unauthenticated Path Traversal via name Query Parameter
Priority MEDIUM 41
A path traversal vulnerability in o1lab/xmysql (all versions) allows an unauthenticated remote attacker to read and download arbitrary files from the server.