CVE-2026-7182
Last modified
CVE-2026-7182 is a critical-severity vulnerability rated 9.2/10 on the CVSS scale. Diagram's export module is vulnerable to Path Traversal in src attribute due to lack of HTML sanitization. An unauthenticated user could craft the html payload which could include local files from the server and display them in the generated pdf. This issue was fixed in version 1.1.1.. EPSS estimates a 0.40% chance of exploitation in the next 30 days.
Description
Diagram's export module is vulnerable to Path Traversal in src attribute due to lack of HTML sanitization. An unauthenticated user could craft the html payload which could include local files from the server and display them in the generated pdf. This issue was fixed in version 1.1.1.
Metrics
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| DHTMLX | Diagram | >= 1.0.0, < 1.1.1 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-7182?
How severe is CVE-2026-7182?
How do I fix CVE-2026-7182?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-7166Vulnerability involving the exposure of sensitive data provi…9.2
- CVE-2026-7167The vulnerability arises when the system fails to properly v…6.9
- CVE-2026-7168Successfully using libcurl to do a transfer over a specific …5.3
- CVE-2026-7177A security flaw has been discovered in ChatGPTNextWeb NextCh…7.3
- CVE-2026-7178A weakness has been identified in ChatGPTNextWeb NextChat up…7.3
- CVE-2026-7179A security vulnerability has been detected in OSPG binwalk u…5.3
- CVE-2026-7183A vulnerability has been found in aligungr UERANSIM up to 3.…5.5
- CVE-2026-7184Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.1…6.5
- CVE-2026-71845A flaw was found in insights-client. The setDefault() functi…6.3
- CVE-2026-71847Ruby JSON is a JSON implementation for Ruby. From 2.20.0 unt…8.7
- CVE-2026-71848Hono is a Web application framework that provides support fo…5.3
- CVE-2026-71849Hono is a Web application framework that provides support fo…3.7
Are you affected by CVE-2026-7182?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST