Vulnerabilities

TI-2026-33325 CVE-2026-45576 · GHSA-c656-jcx2-7pqj

zrok copy writes attacker-controlled WebDAV paths outside the destination root

LOW 37

zrok is software for sharing web services, files, and network resources.

CVSS 4.0HIGH 8.3 Network No auth User interaction EPSS 0.00496 Published 2026-07-16 Fixed in 2.0.3 CWE-22

TI-2026-33317 CVE-2026-45568 · GHSA-jh67-hwqw-m5r7

MEDIUM 50

zrok is software for sharing web services, files, and network resources.

CVSS 4.0CRITICAL 9.9 Network No auth No interaction EPSS 0.00544 Published 2026-07-16 Fixed in 2.0.3 CWE-22

TI-2026-30586 CVE-2026-42275 · GHSA-74m3-9qvm-rp9h

MEDIUM 40

zrok is software for sharing web services, files, and network resources.

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.0033 Published 2026-05-08 Fixed in 2.0.2 CWE-22

TI-2026-29082 CVE-2026-40304 · GHSA-3jpj-v3xr-5h6g

LOW 24

zrok is software for sharing web services, files, and network resources.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00286 Published 2026-04-17 Fixed in 2.0.1 CWE-284

TI-2026-29081 CVE-2026-40303 · GHSA-cpf9-ph2j-ccr9

LOW 39

zrok is software for sharing web services, files, and network resources.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00453 Published 2026-04-17 Fixed in 2.0.1 CWE-400

TI-2026-29080 CVE-2026-40302 · GHSA-4fxq-2x3x-6xqx

LOW 27

zrok is software for sharing web services, files, and network resources.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00209 Published 2026-04-17 Fixed in 2.0.1 CWE-116