Koenkk vulnerabilities
We track 1 vulnerability in Koenkk products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 5, 2026.
1vulnerabilities
0critical
1high
0exploited
8.0average CVSS score
Latest Koenkk vulnerabilities
- 8.0 High severity
zigbee2mqtt: Improper Limitation of a Pathname to a Restricted Directory
Zigbee2MQTT's ExternalJSExtension.getFilePath (lib/extension/externalJS.ts) joins a parameter received via an MQTT message (topic zigbee2mqtt/bridge/request/extension/save) into the extensions base path using path.join(basePath, name) with no sanitization. The