{"id":"CVE-2026-63663","published":"2026-11-06T20:17:23.867","lastModified":"2026-11-11T05:19:50.547","description":"CloudBeaver is a cloud database manager. From version 23.2.3 until 26.1.2, a path traversal vulnerability in its SQL result-editing functionality allows an authenticated user with SQL result-editing privileges to cause the server to open files outside the intended temporary upload directory. In affected database value-handling scenarios, this can disclose local files readable by the CloudBeaver server process. Version 26.1.2 prevents traversal outside the intended temporary upload directory.","cvssScore":6.5,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwes":["CWE-22"],"vendors":[],"products":[],"references":[{"url":"https://github.com/dbeaver/cloudbeaver/commit/caef729a8d227b0446eab6f0ae5f1dc20dced9b5","tags":[]},{"url":"https://github.com/dbeaver/cloudbeaver/pull/4411","tags":[]},{"url":"https://github.com/dbeaver/cloudbeaver/security/advisories/GHSA-8wr4-mh28-m992","tags":[]}],"exploitRefs":[{"url":"https://github.com/dbeaver/cloudbeaver/commit/caef729a8d227b0446eab6f0ae5f1dc20dced9b5","tags":[]},{"url":"https://github.com/dbeaver/cloudbeaver/pull/4411","tags":[]},{"url":"https://github.com/dbeaver/cloudbeaver/security/advisories/GHSA-8wr4-mh28-m992","tags":[]}],"hasPoc":true,"ai":null}