Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2026-33589

Arbitrary File Read via Local File Inclusion (LFI)

Description

Lack of user input validation in the file upload functionality of Open Notebook v1.8.3 allows the application user to access local files content from the docker container via path traversal.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Open Notebook Open Notebook

Default version status: unaffected

  • 0 to ≤ 1.8.3affected

References