Junglewise Threat Intelligence
CVE-2026-73509: GO-2026-6110 - OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal in github.com/OpenListTeam/Open
CVE-2026-73509 · Severity: low · CVSS 3.1 · Published 2026-08-18
Technologies: github.com/OpenListTeam/OpenList/v4 (Go), github.com/OpenListTeam/OpenList (Go), github.com/OpenListTeam/OpenList/v3 (Go). Vendors: Go.
Executive brief
OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal in github.com/OpenListTeam/OpenList
Affected products
- Go github.com/OpenListTeam/OpenList/v4
- Go github.com/OpenListTeam/OpenList
- Go github.com/OpenListTeam/OpenList/v3