Security Advisory

CVE-2026-67918

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-17 00:00:00

Last updated 2026-08-18 15:45:14

Assigner mitre

CVSS score 7.5

State PUBLISHED

Description

Directory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain sensitive information via the validatePath function in api/hermes/download endpoint

← Browse all CVEs View on cve.org ↗