THREAT OPS › Threat News › [NVD] CVE-2026-72569 (CRITICAL 9.1) — A path traversal vulnerability in cube-root/directory-serve through 1.3.7 allows an unauthenticated remote attacker to delete arbitrary files outside the intended served directory when the application is run with the --delete option.
[NVD] CVE-2026-72569 (CRITICAL 9.1) — A path traversal vulnerability in cube-root/directory-serve through 1.3.7 allows an unauthenticated remote attacker to delete arbitrary files outside the intended served directory when the application is run with the --delete option.
CVE-2026-72569 CVSS: 9.1 CRITICAL Published: 2026-08-10T11:17:29.503
A path traversal vulnerability in cube-root/directory-serve through 1.3.7 allows an unauthenticated remote attacker to delete arbitrary files outside the intended served directory when the application is run with the --delete option.
Indicators of compromise
- CVE-2026-72569cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-72569