Is CVE-2026-81730 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-81730 being exploited in the wild.

How severe is CVE-2026-81730?

High severity, with a CVSS score of 8.2, published 27 August 2026.

Is there a fix for CVE-2026-81730?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-81730 attacked?

It is attacked over the network, in a web application.

Am I affected by CVE-2026-81730?

Check whether you run Dolibarr Crm, Dolibarr or Dolibarr Erp\ at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-81730: Dolibarr path traversal in email attachment handling

CVE-2026-81730 · Severity: high · CVSS 8.2 · Published 2026-08-27

Dolibarr is an open-source enterprise resource planning (ERP) and customer relationship management (CRM) system used to manage business operations. A vulnerability in the email collector module allows an attacker to save files outside the intended attachment directory by sending emails with specially crafted filenames containing path traversal sequences. On systems where the web directory is writable, this enables placement of malicious files in web-executable directories for code execution; on hardened systems, it can corrupt other objects' files or forge document contents.

Technologies: Dolibarr Crm, Dolibarr, Dolibarr Erp\. Vendors: Dolibarr.

Quick answers

Is CVE-2026-81730 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-81730 being exploited in the wild.
How severe is CVE-2026-81730?: High severity, with a CVSS score of 8.2, published 27 August 2026.
Which products and versions are affected?: Dolibarr 9.0.0 through 23.0.4.
Is there a fix for CVE-2026-81730?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-81730 attacked?: It is attacked over the network, in a web application.
Am I affected by CVE-2026-81730?: Check whether you run Dolibarr Crm, Dolibarr or Dolibarr Erp\ at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is a path traversal flaw in Dolibarr's email attachment handling. The saveAttachment() functions in emailcollector.lib.php and emailcollector.class.php fail to sanitize attachment filenames before passing them to file_put_contents(), allowing directory traversal sequences (e.g., "../") in MIME header filenames to reach the filesystem. The attack requires no authentication or user interaction—any sender can exploit this by emailing a mailbox monitored by an EmailCollector instance. Exploitation can result in arbitrary file write to the documents tree or web-executable paths depending on file permissions. The flaw affects versions 9.0.0 through 23.0.4; version 24.0.0 applies dol_sanitizePathName() and dol_sanitizeFileName() functions to mitigate the issue.

Affected products

Dolibarr Dolibarr 9.0.0 through 23.0.4

Timeline

2026-08-27: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.