Blinko vulnerabilities
We track 1 vulnerability in Blinko products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 12, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Blinko vulnerabilities
- 8.8 High severity
Blinko: Path Traversal: '../filedir'
Blinko through 1.8.8 allows directory traversal, overwriting startup files as root, via installPlugin. It builds the plugin install path from an unsanitized name in server/routerTrpc/plugin.ts, and the plugin.installPlugin tRPC procedure is open to any authent