CVE-2026-27897

Vociferous provides cross-platform, offline speech-to-text with local AI refinement. Prior to 4.4.2, the vulnerability exists in src/api/system.py within the export_file route. The application accepts a JSON payload containing a filename and content. While the developer intended for a native UI dialog to handle the file path, the API does not validate the filename string before it is processed by the backends filesystem logic. Because the API is unauthenticated and the CORS configuration in app.py is overly permissive (allow_origins=["*"] or allowing localhost), an external attacker can bypass the UI entirely. By using directory traversal sequences (../), an attacker can force the app to write arbitrary data to any location accessible by the current user's permissions. This vulnerability is fixed in 4.4.2.

• CWE-22
• CWE-306

• https://github.com/WanderingAstronomer/Vociferous/security/advisories/GHSA-7cpr-frgj-h85vExploit, Vendor Advisory

Published

Mar 11, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-27891FacturaScripts is an open source accounting and invoicing so…7.2
• CVE-2026-27892FacturaScripts is an open source accounting and invoicing so…6.5
• CVE-2026-27893vLLM is an inference and serving engine for large language m…8.8
• CVE-2026-27894LDAP Account Manager (LAM) is a webfrontend for managing ent…8.8
• CVE-2026-27895LDAP Account Manager (LAM) is a webfrontend for managing ent…8.8
• CVE-2026-27896The Go MCP SDK used Go's standard encoding/json.Unmarshal fo…7.5
• CVE-2026-27898Vaultwarden is an unofficial Bitwarden compatible server wri…5.4
• CVE-2026-27899WireGuard Portal (or wg-portal) is a web-based configuration…8.8
• CVE-2026-2790Same-origin policy bypass in the Networking: JAR component. …9.8
• CVE-2026-27900The Terraform Provider for Linode versions prior to v3.9.0 l…7.7
• CVE-2026-27901Svelte performance oriented web framework. Prior to version …6.1
• CVE-2026-27902Svelte performance oriented web framework. Prior to version …5.4