CrowdSecLive Exploit Tracker
Insufficient DataCVE-2026-116067Public Exploit

Paisa - Path Traversal (CVE-2026-116067)

PublishedOct 25, 2026
First SeenN/A
Last Seen
Reported
CVSS8.8
A
AnanthakumaranPaisa
web_application

Description

Paisa before 0.7.8 contains a path traversal vulnerability in the GetFile, GetSheet, DeleteBackups, and DeleteSheetBackups handlers that lets unauthenticated attackers read files and delete backups through ../ sequences in file names. Attackers can send crafted names to the editor file and delete_backups endpoints to read any server-readable file and remove backup files outside the journal or sheets directory.

psychologyCrowdSec Analysis

CVE-2026-116067 is a high-severity path traversal vulnerability in Paisa versions before 0.7.8. Unauthenticated remote attackers can use crafted ../ file names in affected endpoints to read server-accessible files and delete backups outside the intended directories, potentially exposing sensitive data and disrupting recovery.

CrowdSec has been tracking this vulnerability and its exploits since 26th of October 2026.

CrowdSec has not observed any significant exploitation activity targeting CVE-2026-116067 across its network. As a result, no community-driven trend analysis is available for this vulnerability at this time.

Attackers target /api/editor/file and /api/sheets/file with JSON requests containing traversal sequences such as ../ in the name field. These requests attempt to read files outside the intended directories without authentication.

lock

Full Intelligence Available

Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.

EventDate
CVE Published2026-10-25
Rule Released2026-10-26

Related Weaknesses

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

arrow_forward

Remediation & Protection

lock to download blocklists, subscribe to firewalls, and access IP intelligence.

External References