CVE-2026-8757
Last modified
CVE-2026-8757 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. A vulnerability was found in adenhq hive up to 0.11.0. This affects the function _read_events_tail of the file core/framework/server/routes_sessions.py of the component Delete Request Handler. EPSS estimates a 0.61% chance of exploitation in the next 30 days.
Description
A vulnerability was found in adenhq hive up to 0.11.0. This affects the function _read_events_tail of the file core/framework/server/routes_sessions.py of the component Delete Request Handler. Performing a manipulation results in path traversal. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Adenhq | Hive | <= 0.11.0 |
References
- https://gist.github.com/YLChen-007/ff3ff201b05d13d41f949f86e9187bd2Third Party Advisory
- https://vuldb.com/submit/811276Third Party Advisory, VDB Entry
- https://vuldb.com/vuln/364384Third Party Advisory, VDB Entry
- https://vuldb.com/vuln/364384/ctiPermissions Required, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-8757?
How severe is CVE-2026-8757?
How do I fix CVE-2026-8757?
Are you affected by CVE-2026-8757?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST