CVE-2026-0963
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller
Summary
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller
Original description
The description as published by the source.
An input neutralization vulnerability in the File Operations API Endpoint component of Crafty Controller allows a remote, authenticated attacker to perform file tampering and remote code execution via path traversal.
References
- advisory github.com
- advisory nvd.nist.gov
- report gitlab.com