CVE-2026-39345CWE-22

OrangeHRM Affected by Arbitrary File Read via Path Traversal in Email Template Loader

Medium · published April 7, 2026

CVSS v4.0
4.6
EPSS
0%
Percentile
40.1
In the wild
Unconfirmed
What it is

OrangeHRM is a comprehensive human resource management (HRM) system. From 5.0 to 5.8, OrangeHRM Open Source fails to restrict email template file resolution to the intended plugins directory, allowing an authenticated actor who can influence the template path to read arbitrary local files. This vulnerability is fixed in 5.8.1.

The record
Technical detail
CVSS v4.0
4.6 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N
EPSS
0.00474 · 40.1th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-04-07T18:17Z
EPSS history
Timeline
  • 07 APR 18:17Z
    OrangeHRM Affected by Arbitrary File Read via Path Traversal in Email Template Loader
    cvelistv5