Is CVE-2026-67200 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-67200 being exploited in the wild.

How severe is CVE-2026-67200?

High severity, with a CVSS score of 7.5, published 4 August 2026.

Is there a fix for CVE-2026-67200?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-67200 attacked?

It is attacked over the network.

Am I affected by CVE-2026-67200?

Check whether you run Perspective at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-67200: Perspective path traversal in static file handler

CVE-2026-67200 · Severity: high · CVSS 7.5 · Published 2026-08-04

Perspective is an analytics and data visualization tool used in dashboards and reporting systems across financial and corporate environments. A path traversal vulnerability allows attackers to read any file on the server—including credentials, API keys, and application secrets—without authentication by manipulating HTTP request paths. The attacker can access sensitive files cross-origin due to overly permissive security headers.

Technologies: Perspective. Vendors: Perspective.

Quick answers

Is CVE-2026-67200 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-67200 being exploited in the wild.
How severe is CVE-2026-67200?: High severity, with a CVSS score of 7.5, published 4 August 2026.
Which products and versions are affected?: Perspective 5.0.0.
Is there a fix for CVE-2026-67200?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-67200 attacked?: It is attacked over the network.
Am I affected by CVE-2026-67200?: Check whether you run Perspective at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability exists in Perspective 5.0.0's static file handler (cwd_static_file_handler) and is classified as CWE-22 (path traversal). The root cause is insufficient sanitization of query strings in HTTP request URL paths, which allows attackers to include literal "../" segments to escape the configured asset root directory. No authentication is required; the attack is triggered over the network via HTTP requests. An attacker can retrieve arbitrary files from the server filesystem, with results exposed cross-origin due to a wildcard Access-Control-Allow-Origin header on all responses. The vulnerability has a CVSS score of 8.7 (network-reachable, unauthenticated, high confidentiality impact).

Affected products

Perspective Perspective 5.0.0

Timeline

2026-08-04: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.