Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2026-33588

Arbitrary File Write Through Path Traversal

Description

Lack of user input validation in the file upload functionality of Open Notebook v1.8.3 allows the application user to create or modify files on the docker container via path traversal.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Open Notebook Open Notebook

Default version status: unaffected

  • 0 to ≤ 1.8.3affected

References