Read the docs
TI-2025-38691 Aliases CVE-2025-62424

ClipBucket path traversal vulnerability in template editor allows arbitrary file read and write

Priority HIGH 65CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · Low
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

ClipBucket is a web-based video-sharing platform. In ClipBucket version 5.5.2 - #146 and earlier, the /admin_area/template_editor.php endpoint is vulnerable to path traversal. The validation of the file-loading path is inadequate, allowing authenticated administrators to read and write arbitrary files outside the intended template directory by inserting path traversal sequences into the folder parameter. An attacker with administrator privileges can exploit this vulnerability to read sensitive files such as /etc/passwd and modify writable files on the system, potentially leading to sensitive information disclosure and compromise of the application or server. This issue is fixed in version 5.5.2 - #147.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00941 61st percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
MacWarriorclipbucket-v5< 5.5.2 - #147—No fix listedCNA
  • clipbucket-v5 VendorMacWarrior Affected < 5.5.2 - #147 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:oxygenz:clipbucket:*:*:*:*:*:*:*:*5.3 to before 5.5.2-147VulnerableMacWarrior
  • cpe:2.3:a:oxygenz:clipbucket:*:*:*:*:*:*:*:* Versions 5.3 to before 5.5.2-147 Vulnerable ·MacWarrior

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-62424

References

Exploit 1

Patch 1

  • TI-2026-17576 ClipBucket v5 Vulnerable to Blind SQL Injection through Channel Comments CVSS 3.1CRITICAL 9.8
  • TI-2025-41207 ClipBucket 5.5.2 is affected by an improper access control issue where the product is… CVSS 3.1CRITICAL 9.8
  • TI-2025-15584 ClipBucket V5 Playlist Cover File Upload to Remote Code Execution CVSS 3.1CRITICAL 9.8
  • TI-2024-36252 Untrusted Deserialization in ClipBucket-v5 Version 5.5.1 Revision 199 and Below CVSS 3.1CRITICAL 9.8
  • TI-2024-36251 Untrusted Deserialization in ClipBucket-v5 Version 2.0 to 5.5.1 Revision 199 CVSS 3.1CRITICAL 9.8
  • TI-2026-20797 ClipBucket v5 Affected by Remote Code Execution via Avatar/Background File Upload Race Condition CVSS 4.0CRITICAL 9.3
See all 24 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences