CVE-2026-63663
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
Nov 06, 2026
Vendor
unknown
Description
CloudBeaver is a cloud database manager. From version 23.2.3 until 26.1.2, a path traversal vulnerability in its SQL result-editing functionality allows an authenticated user with SQL result-editing privileges to cause the server to open files outside the intended temporary upload directory. In affected database value-handling scenarios, this can disclose local files readable by the CloudBeaver server process. Version 26.1.2 prevents traversal outside the intended temporary upload directory.