Executive brief
LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper
Affected products
- Go github.com/lf-edge/ekuiper
- Go github.com/lf-edge/ekuiper/v2
Junglewise Threat Intelligence
GO-2025-3799 - LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement in github.com/lf-edge/ekuiper
Severity: info · Published 2025-07-28
Technologies: github.com/lf-edge/ekuiper (Go), github.com/lf-edge/ekuiper/v2 (Go). Vendors: Go.
Related threats
- LF Edge eKuiper path traversal in plugin installation
- LF Edge eKuiper SSRF in external service registration
- LF Edge eKuiper stored XSS in external service creation
- GO-2025-4158 - LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction in github.com/lf-edge/ekuiper
- LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction