Vulnerability Description
Typemill before 2.24.0 contains a path traversal vulnerability that allows authenticated attackers with Author-level privileges to read arbitrary files outside the content directory by supplying traversal sequences in the path query parameter passed to Storage::getFile() with an empty folder argument. Attackers can bypass traversal-prevention controls in Storage::getFolderPath() to access sensitive files.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://github.com/typemill/typemill/commit/bfbb27001acd5c56ad62166dbefe6a59798c
- https://github.com/typemill/typemill/releases/tag/v2.24.2
- https://www.vulncheck.com/advisories/typemill-path-traversal-via-controllerapiim
FAQ
What is CVE-2026-49133?
CVE-2026-49133 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Typemill before 2.24.0 contains a path traversal vulnerability that allows authenticated attackers with Author-level privileges to read arbitrary files outside the content directory by supplying trave...
How severe is CVE-2026-49133?
CVE-2026-49133 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-49133?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.