Read the docs
TI-2026-06303 Aliases CVE-2026-7182GHSA-hr7c-pw36-w99g

Path Traversal in Diagram

Priority MEDIUM 46CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-22 and the CVSS impact.

Summary

Diagram's export module is vulnerable to Path Traversal in src attribute due to lack of HTML sanitization. An unauthenticated user could craft the html payload which could include local files from the server and display them in the generated pdf. This issue was fixed in version 1.1.1.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00397 34th percentileScored 2026-11-07
Fix Fixed Diagram (DHTMLX): 1.1.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
DHTMLXDiagram1.0.0 to before 1.1.11.1.1Patch availableCNA
  • Diagram VendorDHTMLX Affected 1.0.0 to before 1.1.1 Fixed in 1.1.1 Patch available CNA

Remediation

  • Fix · CNA Diagram (DHTMLX) Fixed in 1.1.1

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-7182
  2. 2026-10-03 Alias added: GHSA-hr7c-pw36-w99g

References

Advisory 1

Other 2

  • TI-2024-36799 Local File Inclusion vulnerability in dhtmlxFileExplorer v.8.4.6 allows a remote attacker… CVSS 3.1MEDIUM 6.5
  • TI-2024-36798 Directory Traversal vulnerability in dhtmlxFileExplorer v.8.4.6 allows a remote attacker… CVSS 3.1MEDIUM 6.5
  • TI-2026-30115 Remote Code Execution in PDF Export Module CVSS 4.0CRITICAL 10.0
  • TI-2026-30114 Path Traversal in PDF Export Module CVSS 4.0CRITICAL 9.2
  • TI-2013-05263 Cross-site scripting (XSS) vulnerability in codebase/spreadsheet.php in the Spreadsheet… CVSS 2.0MEDIUM 4.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences