Path Traversal in Badgerati Pode
CVE-2026-42598
Pode is a Cross-Platform PowerShell web framework for creating REST APIs, Web Sites, and TCP/SMTP servers. From 2.4.0, to before 2.13.0, when requesting content from a Static Route, it was possible to request paths such as http://localhost…
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.001 (17.7th percentile) — read the EPSS interpretation.
Affected products
- Badgerati Pode — versions < 2.13.0
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)