CVE-2026-57565

Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience. Prior to 0.11.10, the apps/readest-app/src/pages/api/storage/upload.ts route constructed an object key from the authenticated user's identifier and a client-controlled fileName without rejecting path separators or parent-directory traversal. In the R2 backend, apps/readest-app/src/utils/r2.ts placed that key into a new Request URL before signing it, and URL normalization collapsed parent-directory components so the resulting presigned PUT could escape the caller's namespace. An authenticated attacker who knew a target user identifier and book hash could overwrite or poison that user's stored book object and corrupt the associated file_key metadata; the exact cross-tenant escape was verified for the R2 backend. This issue is fixed in version 0.11.10.

• CWE-22

• https://github.com/readest/readest/commit/495783d04516d05b2eb10f8f8bad297d436b36de
• https://github.com/readest/readest/pull/4638
• https://github.com/readest/readest/releases/tag/v0.11.10
• https://github.com/readest/readest/security/advisories/GHSA-mfmj-2frf-vhgw
• https://github.com/readest/readest/security/advisories/GHSA-mfmj-2frf-vhgw

Published

Nov 4, 2026

Last Modified

Nov 5, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-5755Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.2, 11.5…6.5
• CVE-2026-57554Memory Corruption when asynchronous threads access shared pe…7.8
• CVE-2026-57555Memory Corruption when executing system service routines due…7.8
• CVE-2026-57559Memory corruption while processing service requests.7.8
• CVE-2026-5756Unauthenticated Configuration File Modification Vulnerabilit…7.5
• CVE-2026-57562Readest is a modern, feature-rich ebook reader designed for …6.5
• CVE-2026-57566Readest is a modern, feature-rich ebook reader designed for …9.3
• CVE-2026-57567Readest is a modern, feature-rich ebook reader designed for …8.6
• CVE-2026-57568Lychee is a free, open-source photo-management tool. Prior t…5.7
• CVE-2026-57569Lychee is a free, open-source photo-management tool. Prior t…2.3
• CVE-2026-5757Unauthenticated remote information disclosure vulnerability …7.5
• CVE-2026-57570backpack/crud provides Create, Read, Update & Delete (CRUD) …6.5