CVE-2026-22810

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Versions prior to 3.5.7 contain a path traversal vulnerability in the importer which allows overwriting arbitrary files on disk. The OneNote converter does not sanitize the names of embedded files before writing them to disk. As a result, it's possible for an attacker to create a malicious .one file that includes file names containing ../../, that are then interpreted as part of the target path when extracting attachments from the .one file. This issue has been patched in version 3.5.7.

• CWE-24

• https://github.com/laurent22/joplin/blob/af5108d70233b1db9410346958c1587cf7c1b16d/packages/onenote-converter/renderer/src/page/embedded_file.rs#L13-L16Product
• https://github.com/laurent22/joplin/commit/791668455e1aae50501ff57ea4783b3fba9d377cPatch
• https://github.com/laurent22/joplin/pull/13736Issue Tracking
• https://github.com/laurent22/joplin/releases/tag/v3.5.7Patch, Product
• https://github.com/laurent22/joplin/security/advisories/GHSA-gcmj-c9gg-9vh6Vendor Advisory
• https://github.com/laurent22/joplin/security/advisories/GHSA-gcmj-c9gg-9vh6Vendor Advisory

Published

May 18, 2026

Last Modified

Jul 24, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-22805Metabase is an open-source data analytics platform. Prior to…8.6
• CVE-2026-22806vCluster Platform provides a Kubernetes platform for managin…9.1
• CVE-2026-22807vLLM is an inference and serving engine for large language m…9.8
• CVE-2026-22808fleetdm/fleet is open source device management software. Pri…5.4
• CVE-2026-22809tarteaucitron.js is a compliant and accessible cookie banner…4.4
• CVE-2026-2281The Private Comment plugin for WordPress is vulnerable to St…4.4
• CVE-2026-22812OpenCode is an open source AI coding agent. Prior to 1.0.216…8.8
• CVE-2026-22813OpenCode is an open source AI coding agent. The markdown ren…6.1
• CVE-2026-22814@adonisjs/lucid is an SQL ORM for AdonisJS built on top of K…8.2
• CVE-2026-22815AIOHTTP is an asynchronous HTTP client/server framework for …7.5
• CVE-2026-22816Gradle is a build automation tool, and its native-platform t…7.4
• CVE-2026-22817Hono is a Web application framework that provides support fo…6.5