CVE-2026-75797: Monwoo AI Engine arbitrary file read via path traversal

CVE-2026-75797 · Severity: high · CVSS 7.7 · Published 2026-08-26

The AI Engine WordPress plugin contains a local file inclusion vulnerability that allows attackers with subscriber-level access (or administrative access on WordPress Multisite) to read sensitive files from the server and exfiltrate them to external services. By manipulating a URL parameter sent to the transcription feature, an attacker can bypass directory restrictions and access files outside the intended uploads folder, such as WordPress configuration files containing authentication keys and credentials. This vulnerability requires a non-default "Public API" setting to be enabled for subscriber exploitation, but affects administrators regardless of settings.

Quick answers

Is CVE-2026-75797 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-75797 being exploited in the wild.
How severe is CVE-2026-75797?
High severity, with a CVSS score of 7.7, published 26 August 2026.
Which products and versions are affected?
Monwoo AI Engine 3.3.3 through 3.7.1.
Is there a fix for CVE-2026-75797?
A patch was published on 2026-08-26: Fixed in version 3.7.2 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-75797 attacked?
It is attacked over the network, in a web application.
Am I affected by CVE-2026-75797?
Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is a local file inclusion (LFI) flaw in the AI Engine WordPress plugin's transcription endpoint (POST /wp-json/mwai/v1/simpleTranscribeAudio). The vulnerable get_raw_data() function maps a caller-supplied URL parameter to a local filesystem path without proper validation, allowing path traversal sequences (e.g., `../../../`) to escape the intended uploads directory. The vulnerable code reads the file content and forwards it to an external transcription service provider, enabling exfiltration. Exploitation requires either a Subscriber account with the non-default "Public API" feature enabled, or an Administrator account with no special configuration. The fix, deployed in version 3.7.2, implements lexical path resolution and rejects any attempt to read files outside the uploads directory with an error message.

Affected products

  • Monwoo AI Engine 3.3.3 through 3.7.1

Timeline

  • 2026-08-24: disclosed
  • 2026-08-26: patched: Fixed in version 3.7.2

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.