CVE-2026-6815 Details
Description
An arbitrary file write vulnerability exists in Casdoor's Local File System storage provider. Due to insufficient path sanitization, an authenticated attacker with administrative privileges can perform a Path Traversal attack to create or overwrite arbitrary files anywhere on the host filesystem, bypassing the application's intended storage sandbox.
A path traversal vulnerability allowing arbitrary file write has been identified in Casdoor's Local File System storage provider. This issue arises from inadequate sanitization of user-supplied file paths. An authenticated attacker with administrative privileges can exploit this vulnerability by uploading files through the '/api/upload-resource' endpoint, bypassing the application's intended storage sandbox and overwriting or creating files anywhere on the host filesystem.
A pull request has been submitted to the Casdoor repository to address this vulnerability by implementing proper validation of storage paths. In the meantime, administrators should limit administrative access, restrict the filesystem permissions of the Casdoor service account, and avoid using the Local File System provider in multi-user or exposed environments.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 13, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.kb.cert.org/vuls/id/937808 | CVE | Third Party AdvisoryVDB Entry |
| https://kb.cert.org/vuls/id/937808 | [email protected] | Third Party AdvisoryVDB Entry |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| casbin casdoor | <= 2.328.0 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 1, 2026 | Initial Analysis | [email protected] |
| May 13, 2026 | CVE Modified | CISA-ADP |
| May 11, 2026 | CVE Modified | CVE |
| May 11, 2026 | New CVE Received | [email protected] |