CVE-2026-44692

Sharp is a content management framework built for Laravel as a package. Prior to version 9.22.0, Sharp exposes a generic download endpoint that authorizes access only to the supplied Sharp entity instance, but then reads the target storage disk and path from request parameters. Because the requested storage object is not bound to the authorized entity instance, an authenticated Sharp user who can view one valid record may use that record as an authorization anchor to download unrelated disk-relative objects from configured Laravel Storage disks. The confirmed impact is authenticated disclosure of unrelated objects from configured Laravel Storage disks. This issue does not imply arbitrary host filesystem access outside configured Laravel Storage disk roots. This issue has been patched in version 9.22.0.

• CWE-639

• https://github.com/code16/sharp/releases/tag/v9.22.0
• https://github.com/code16/sharp/security/advisories/GHSA-748w-hm6r-qc7v

Published

Jun 10, 2026

Last Modified

Jul 23, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-44682Local privilege escalation due to DLL hijacking vulnerabilit…7.3
• CVE-2026-44687In NLnet Labs Unbound 1.13.2 up to and including 1.25.1, stu…3.7
• CVE-2026-44688In Eclipse Theia versions prior to 1.71.0, the AI chat agent…8.8
• CVE-2026-4469A vulnerability was identified in itsourcecode Online Frozen…9.8
• CVE-2026-44690In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insu…7.5
• CVE-2026-44691In Eclipse Theia versions prior to 1.69.0, custom task defin…8.8
• CVE-2026-44693Pi-hole FTL is the core engine of the Pi-hole network-level …8.8
• CVE-2026-44694n8n-MCP is an MCP server that provides AI assistants access …9.1
• CVE-2026-44695Outline is a service that allows for collaborative documenta…6.5
• CVE-2026-44696OpenProject is open-source, web-based project management sof…5.7
• CVE-2026-44697Klever-Go is the Go implementation of the Klever blockchain …8.6
• CVE-2026-44698Home Assistant is open source home automation software that …8.3