FlexGet vulnerabilities
We track 1 vulnerability in FlexGet products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 20, 2026.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest FlexGet vulnerabilities
- 8.1 High severity
FlexGet: Improper Limitation of a Pathname to a Restricted Directory
FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to write arbitrary files by supplying malicious archive member paths. Attackers can deliver zip or rar archives with ../ sequences or absolute p