Path Traversal in Estonian Information System Authority (Ria) Digidoc4

CVE-2026-70383

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Estonian Information System Authority (RIA) DigiDoc4 client. This issue affects DigiDoc4: from 4.0.0 before 4.11.0.

Vulnerability class: Path Traversal (Directory Traversal)

Affected products

Weakness classification (CWE)

References