CVE-2026-71215CWE-22path-traversal

CVE-2026-71215

High · published August 5, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
45.7
In the wild
Unconfirmed
What it is

art-template's sub-template resolution logic (src/compile/adapter/resolve-filename.js), used by both the include and extend template directives, resolves the target file path via path.resolve(root, filename) with no check afterward that the result remains inside root.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00558 · 45.7th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-08-05T12:16Z
References (1)
https://github.com/aui/art-template · 309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c
EPSS history
Timeline
  • 05 AUG 06:59Z
    art-template - Path Traversal in Sub-Template Resolution via include()/extend()
    cvelistv5