CVE-2026-63644
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
Nov 09, 2026
Vendor
unknown
Description
bird-lg-go is a BIRD looking glass in Go. Prior to version 1.4.7, unsanitized input path enables arbitrary local file read, allowing an unauthenticated remote attacker to read sensitive files such as /etc/shadow and /root/.bash_history. This issue has been patched in version 1.4.7.