CVE-2026-49133
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
Jun 17, 2026
Vendor
unknown
Description
Typemill before 2.24.0 contains a path traversal vulnerability that allows authenticated attackers with Author-level privileges to read arbitrary files outside the content directory by supplying traversal sequences in the path query parameter passed to Storage::getFile() with an empty folder argument. Attackers can bypass traversal-prevention controls in Storage::getFolderPath() to access sensitive files.