{"id":"CVE-2026-105037","published":"2026-10-15T21:17:04.350","lastModified":"2026-10-16T20:17:18.330","description":"EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 allow any registered, low-privilege account to read arbitrary files from the server by supplying an attacker-controlled file path. This exposes middleware files and server secrets.","cvssScore":9.9,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-73"],"vendors":[],"products":[],"references":[{"url":"https://github.com/xn0tsa/your-secrets-are-safe-with-me","tags":[]},{"url":"https://takeonme.org/gcves/GCVE-1337-2026-00000000000000110111111111111111110000000000000000000011111100011111111110000000000000000000011111111111111000000000000000000010001/","tags":[]},{"url":"https://www.theverge.com/tech/1010727/eiliko-robot-hack-energize-lab","tags":[]}],"exploitRefs":[{"url":"https://github.com/xn0tsa/your-secrets-are-safe-with-me","tags":[]}],"hasPoc":true,"ai":{"summary":"A file path traversal vulnerability in EnergizeLab station-middleware Docker images allows low-privilege users to read arbitrary server files, potentially exposing sensitive middleware code and secrets.","exploitability":"Easy to exploit with a registered account; attackers need only supply a crafted file path to access any file on the server filesystem.","blast_radius":"Exploitation could expose critical middleware source code, configuration files, and server secrets across multiple affected deployments.","remediation":"Upgrade to station-middleware Docker images version 1.8.3 or later to remediate this vulnerability.","detection":"Monitor for unusual file access patterns in application logs, particularly requests accessing system paths like '/etc/passwd' or '/proc/self/environ' from authenticated user sessions.","tags":["file-traversal","web","middleware","privilege-escalation"],"model":"garnet-coder","analyzedAt":"2026-10-16T08:45:27.284Z"}}