← Back to CVE search

CVE-2026-33588

Open Notebook

Description

Lack of user input validation in the file upload functionality of Open Notebook v1.8.3 allows the application user to create or modify files on the docker container via path traversal.

CVSS 8.1EPSS 0.182%Risk 0.82
View source
Published
2026-05-07 11:16:01
Affected versions
==1.8.3
Type
Package
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H