Vulnerability DatabaseCVE-2026-116213
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
CVE-2026-116213
Published:October 26, 2026
Updated:November 12, 2026
Webasyst Framework through 4.4.0 contains an arbitrary file read vulnerability in waArchiveTar::writeItem() that creates symlinks from theme archives without validating link targets. Authenticated users with theme management rights can upload themes containing symlinks to wa-config/db.php or /etc/passwd and read them through the public theme path.
Related Resources (7)
https://github.com/webasyst/webasyst-framework/blob/cc609e5db23e68d982e15ebf65bf9d25120333af/wa-system/file/waArchiveTar.class.php#L1243-L1250
https://github.com/webasyst/webasyst-framework/blob/cc609e5db23e68d982e15ebf65bf9d25120333af/wa-system/file/waTheme.class.php#L2609-L2660
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/116xxx/CVE-2026-116213.json
https://github.com/webasyst/webasyst-framework
https://nvd.nist.gov/vuln/detail/CVE-2026-116213
https://www.vulncheck.com/advisories/webasyst-framework-through-4.4.0-arbitrary-file-read-via-waarchivetar-symlinks
https://github.com/webasyst/webasyst-framework/issues/396
Do you need more information?
Contact Us
CVSS v4
Base Score:
6.9
Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
HIGH
User Interaction
NONE
Vulnerable System Confidentiality
HIGH
Vulnerable System Integrity
NONE
Vulnerable System Availability
NONE
Subsequent System Confidentiality
NONE
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
CVSS v3
Base Score:
4.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE
Weakness Type (CWE)
Improper Link Resolution Before File Access
CWE-59
EPSS
Base Score:
0.45