Path Traversal in Advplyr Audiobookshelf
CVE-2026-42888
Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the podcast creation endpoint at server/controllers/PodcastController.js accepts a user-controlled file path without sufficient boundary validation to ensure it remains within the intended library directory. This vulnerability is fixed in 2.32.2.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.003 (25.8th percentile) — read the EPSS interpretation.
Affected products
- Advplyr Audiobookshelf — versions < 2.33.2
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)