一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月20日

CVE-2026-93992 [HIGH] – Gopeed through 2.0.0-beta.3 contains a path traversal vulnerability in archive extraction

未分类
📑 文章目录

Gopeed through 2.0.0-beta.3 contains a path traversal vulnerability in archive extraction that allows attackers to write arbitrary files outside the extraction directory. Attackers can craft malicious archives with entries containing directory traversal sequences that bypass validation, enabling file write operations when users download and extract archives with AutoExtract enabled.