# CVE-2026-10074: Interinfo DreamMaker arbitrary file read via relative path traversal

Source: https://junglewise.ai/threats/cve-2026-10074-interinfo-dreammaker-arbitrary-file-read-via-relative-path  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-29. Updated: 2026-05-29  
License: CC BY 4.0 with a link back

CVE-2026-10074 · Severity: medium · CVSS 4.9 · Published 2026-05-29

Interinfo DreamMaker, a development platform, contains a security flaw that allows authorized users to access sensitive system files. An attacker with existing high-level privileges on the local system can bypass folder restrictions to download files they should not be able to see. This could lead to the exposure of configuration data or other sensitive information stored on the server.

Technologies: [Interinfo DreamMaker Java Composer](https://junglewise.ai/threats/technologies/dreammaker-java-composer). Vendors: [Interinfo](https://junglewise.ai/threats/vendors/interinfo).

## Quick answers

**Is CVE-2026-10074 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-10074 being exploited in the wild.

**How severe is CVE-2026-10074?** Medium severity, with a CVSS score of 4.9, published 29 May 2026.

**Which products and versions are affected?** Interinfo DreamMaker Java Composer 2.2 and earlier.

**Is there a fix for CVE-2026-10074?** A patch was published on 2026-05-29: Fixed in Java Composer 2.3 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-10074 attacked?** It is attacked with local access, in a network appliance.

**Am I affected by CVE-2026-10074?** Check whether you run Interinfo DreamMaker Java Composer at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A relative path traversal vulnerability (CWE-23) exists in Interinfo DreamMaker Java Composer version 2.2 and earlier. The flaw allows a local attacker with high privileges (PR:H) to bypass directory restrictions and read arbitrary files on the host system. By supplying specially crafted input containing path traversal sequences (e.g., ../), the attacker can download sensitive system files. The vulnerability is resolved in Java Composer version 2.3. Note: While the description mentions 'local' attackers, the CVSS vector provided by the CNA (AV:N) suggests a network-reachable component is involved.

## Affected products

- Interinfo DreamMaker Java Composer 2.2 and earlier

## Timeline

- 2026-05-29: disclosed
- 2026-05-29: advisory
- 2026-05-29: patched: Fixed in Java Composer 2.3

## References

- [https://www.twcert.org.tw/en/cp-139-10946-1127f-2.html](https://www.twcert.org.tw/en/cp-139-10946-1127f-2.html)
- [https://www.twcert.org.tw/tw/cp-132-10943-8fb00-1.html](https://www.twcert.org.tw/tw/cp-132-10943-8fb00-1.html)

## Related threats

- [Interinfo DreamMaker path traversal in Java Composer](https://junglewise.ai/threats/cve-2026-10075-interinfo-dreammaker-path-traversal-in-java-composer)
- [Interinfo DreamMaker arbitrary file read via relative path traversal](https://junglewise.ai/threats/cve-2026-10073-interinfo-dreammaker-arbitrary-file-read-via-relative-path)
- [Interinfo DreamMaker arbitrary file upload in Java Composer](https://junglewise.ai/threats/cve-2026-10072-interinfo-dreammaker-arbitrary-file-upload-in-java-composer)
- [Interinfo DreamMaker arbitrary file upload in Java Composer](https://junglewise.ai/threats/cve-2026-10071-interinfo-dreammaker-arbitrary-file-upload-in-java-composer)