THREATOPS

THREAT OPS › Threat News › [GHSA] GHSA-59xm-4m8c-g3xj (high) — MineAdmin Vulnerable to Path Traversal via Unsanitized identifier in Plugin Install/Uninstall

[GHSA] GHSA-59xm-4m8c-g3xj (high) — MineAdmin Vulnerable to Path Traversal via Unsanitized identifier in Plugin Install/Uninstall

medgithub_advisoriesPublished 2026-08-18

GHSA-59xm-4m8c-g3xj Severity: high CVE: CVE-2026-55224

MineAdmin Vulnerable to Path Traversal via Unsanitized identifier in Plugin Install/Uninstall

## Path Traversal via Unsanitized Identifier in Plugin Install/Uninstall

### Summary The app-store plugin service concatenates unsanitized user-supplied `identifier` values directly into file system paths. An attacker can use path traversal sequenc

Indicators of compromise

CVE-2026-55224cve

Original source: https://github.com/advisories/GHSA-59xm-4m8c-g3xj