cloudcmd vulnerabilities

2 known vulnerabilities in cloudcmd from Coderaiser. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  cloudcmd: Relative Path Traversal

  CVE-2026-110690Oct 14, 2026Coderaiser

  Cloud Commander (cloudcmd) versions 19.20.2 through 19.21.1 contains a path traversal vulnerability in the GET /api/v1/pack endpoint where the onGET handler at server/rest/index.js:130 calls the unguarded root() function instead of the root.resolve() validatio

• 9.8 Critical severity

  cloudcmd: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-82460Aug 29, 2026Coderaiser

  Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Attackers can use path traversal sequences to read, write, move, or copy files outside