Path Traversal in Openbullet Openbullet2
CVE-2026-25559
OpenBullet2 through version 0.3.2 contains a path traversal vulnerability in the wordlist endpoint that allows authenticated attackers to perform arbitrary file read, write, and delete operations by supplying unsanitized absolute paths to the upload handler and wordlist functions. Attackers can chain the file write and delete primitives to achieve remote code execution by manipulating critical system files such as /etc/passwd, with full system impact since the application runs as root by default.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.006 (44.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Openbullet Openbullet2 — versions 0
Weakness classification (CWE)
References
- disclosure@vulncheck.com (technical-description, exploit)
- disclosure@vulncheck.com (third-party-advisory)
Frequently asked questions
- What is CVE-2026-25559?
- CVE-2026-25559 is a high-severity vulnerability in Openbullet Openbullet2, classified under Path Traversal. CVSS score: 8.8/10. Published 2026-06-08.
- How severe is CVE-2026-25559?
- High severity. CVSS v3 base score is 8.8 out of 10.