Executive brief
Wolf CMS, a content management system, contains a security flaw that allows logged-in users with basic file management permissions to upload and execute malicious code. By bypassing file restrictions, an attacker can take full control of the web server, potentially leading to data theft, website defacement, or complete service disruption. This affects all versions of the software up to and including 0.8.3.1.
Technical details
A remote code execution (RCE) vulnerability exists in Wolf CMS through version 0.8.3.1 due to unrestricted file upload (CWE-434) in the FileManagerController. The root cause is a lack of file extension validation within the create_file() and save() functions. An authenticated attacker possessing the 'file_manager_mkfile' capability can exploit this to write arbitrary PHP files into the web-accessible FILES_DIR directory. Once uploaded, the attacker can execute the malicious code by making a direct HTTP request to the file. The vulnerability is reachable over the network and requires low-level authentication.
Affected products
- Wolf CMS Wolf CMS through 0.8.3.1
Timeline
- 2026-07-30: disclosed: Initial disclosure by VulnCheck and CayCon
- 2026-07-30: advisory: NVD entry published