CVE-2026-109118
Last modified
CVE-2026-109118 is a medium-severity vulnerability rated 4.6/10 on the CVSS scale. Improper path containment check in ikus060 rdiffweb 7.1.1 allows an authenticated user to cause the browse, restore, history and delete operations to resolve to a path outside the repository being operated on, via a percent-encoded traversal sequence (%2e%2e) in the request path, because the containment check uses a string prefix comparison (startswith) instead of a filesystem path boundary check. The target must be a sibling path whose name begins with the repository path, and the user already hold permissions on it; the issue can mislead a user into operating on, or deleting, data other than the repository displayed.
Description
Improper path containment check in ikus060 rdiffweb 7.1.1 allows an authenticated user to cause the browse, restore, history and delete operations to resolve to a path outside the repository being operated on, via a percent-encoded traversal sequence (%2e%2e) in the request path, because the containment check uses a string prefix comparison (startswith) instead of a filesystem path boundary check. The target must be a sibling path whose name begins with the repository path, and the user already hold permissions on it; the issue can mislead a user into operating on, or deleting, data other than the repository displayed
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| ikus-soft | rdiffweb | < 7.1.1 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-109118?
How severe is CVE-2026-109118?
How do I fix CVE-2026-109118?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-10911Insufficient validation of untrusted input in Media in Googl…8.3
- CVE-2026-109110A flaw has been found in Wavlink WL-WN592AX6 250422. This is…10
- CVE-2026-109111Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2026-109114A vulnerability has been found in AdithyaYelloju Restaurant-…7.3
- CVE-2026-109115A vulnerability was found in AdithyaYelloju Restaurant-Manag…7.3
- CVE-2026-109116A vulnerability was determined in AdithyaYelloju Restaurant-…7.3
- CVE-2026-109119Improper Privilege Management in the user management API end…8.8
- CVE-2026-10912Insufficient validation of untrusted input in Extensions in …6.5
- CVE-2026-109122The network management service on affected Kiloview E3 NDI e…9.1
- CVE-2026-109125In NLnet Labs Unbound up to and including version 1.26.1, an…5.3
- CVE-2026-109126IBM Verify Identity Access 11.0.3.1 and IBM Security Verify …8.8
- CVE-2026-10913Use after free in ANGLE in Google Chrome on Windows prior to…8.8
Are you affected by CVE-2026-109118?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST