Junglewise Threat Intelligence
CVE-2026-69160: GO-2026-6109 - OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API in github.com/OpenListTeam/OpenList
CVE-2026-69160 · Severity: low · CVSS 3.1 · Published 2026-08-18
Technologies: github.com/OpenListTeam/OpenList/v4 (Go), github.com/OpenListTeam/OpenList (Go), github.com/OpenListTeam/OpenList/v3 (Go). Vendors: Go.
Executive brief
OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API in github.com/OpenListTeam/OpenList
Affected products
- Go github.com/OpenListTeam/OpenList/v4
- Go github.com/OpenListTeam/OpenList
- Go github.com/OpenListTeam/OpenList/v3