CVE-2026-15326halo-dev halo Theme Installation ThemeUtils.java ThemeUtils.unzipThemeTo path traversal

Beschreibung

A vulnerability was identified in halo-dev halo up to 2.24.2. This affects the function ThemeUtils.unzipThemeTo of the file ThemeUtils.java of the component Theme Installation. Such manipulation of the argument metadata.name leads to path traversal. The attack may be launched remotely. The exploit is publicly available and might be used. The project closed the issue as "duplicate" but did not reference any other issue, report, or CVE.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• VDB-377265 | halo-dev halo Theme Installation ThemeUtils.java ThemeUtils.unzipThemeTo path traversal vdb-entrytechnical-description
• VDB-377265 | CTI Indicators (IOB, IOC, TTP, IOA) signaturepermissions-required
• CVE-2026-15326 | CVE Analysis and Report third-party-advisory
• Submit #853064 | halo <=2.24.2 Arbitrary File Write(AFW) third-party-advisory
• https://github.com/halo-dev/halo/issues/10062 exploitissue-tracking
• https://github.com/halo-dev/halo/ product