Path Traversal in Owen2345 Camaleon-Cms
CVE-2026-116009
Camaleon CMS before 2.9.3 contains a path traversal vulnerability that allows users with only the media permission to write arbitrary files by supplying ../ sequences in the name parameter. Attackers can send a base64 data: URI to the crop_url media action to write an ERB template into a theme's views directory, which executes when rendered.
Vulnerability class: Path Traversal (Directory Traversal)
Published .
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
Weakness classification (CWE)
References
- github.com/owen2345/camaleon-cms/commit/430cce27ea63a397a7b7fa0260b4ec2128ea63fd (patch)
- github.com/owen2345/camaleon-cms/pull/1201 (issue-tracking, patch)
- github.com/owen2345/camaleon-cms/pull/1211 (issue-tracking, patch)
- github.com/owen2345/camaleon-cms/blob/2.9.2/app/helpers/camaleon_cms/uploader_h… (technical-description)
- gist.github.com/lukmanazri/b7e76a1ddc84dc977800013c53f671b5 (third-party-advisory)
- github.com/owen2345/camaleon-cms/releases/tag/2.9.3 (release-notes)
- www.vulncheck.com/advisories/camaleon-cms-before-2.9.3-path-traversal-rce-via-m… (third-party-advisory)
Frequently asked questions
- What is CVE-2026-116009?
- CVE-2026-116009 is a high-severity vulnerability in Owen2345 Camaleon-Cms, classified under Path Traversal. CVSS score: 8.8/10. Published 2026-10-24.
- How severe is CVE-2026-116009?
- High severity. CVSS v3 base score is 8.8 out of 10.