CVE-2026-8736 Details

A path traversal vulnerability has been identified in Oinone Pamirs versions through 7.2.0. The issue resides in the RestController component, specifically within the LocalFileClient.java file. The vulnerability arises because the request.getParameter function does not properly sanitize the uniqueFileName parameter, allowing attackers to manipulate the file path and escape the designated upload directory. This exploitation can lead to unauthorized file uploads, with potential for remote code execution.

Update the Spring configuration to enforce permission checks on the '/file/**' path, preventing access by unauthenticated users. Implement validation to normalize and verify file paths before writing them. Additionally, avoid running the Java process as the root user and restrict the web service's write permissions to safe directories.