THREAT OPS › Threat News › [GHSA] GHSA-2jwf-f4xq-f24h (medium) — ep_etherpad-lite: Import/export uses Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite
[GHSA] GHSA-2jwf-f4xq-f24h (medium) — ep_etherpad-lite: Import/export uses Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite
GHSA-2jwf-f4xq-f24h Severity: medium CVE: CVE-2026-55086
ep_etherpad-lite: Import/export uses Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite
## Description
`src/node/handler/ImportHandler.ts` and `src/node/handler/ExportHandler.ts` both compute their temporary working-file paths as:
```ts const randNum = Math.floor(Math.random() * 0xFFFF
MITRE ATT&CK techniques
Indicators of compromise
- CVE-2026-55086cve
- https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Math/randomurl
- https://nodejs.org/api/crypto.html#cryptorandombytessize-callbackurl
Original source: https://github.com/advisories/GHSA-2jwf-f4xq-f24h