manyfold vulnerabilities

2 known vulnerabilities in manyfold from Manyfold3d. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  manyfold: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-46336Jul 16, 2026Manyfold3d

  Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. From 0.96.0 until 0.140.0, authenticated users can rename uploaded files with path traversal sequences because app/models/model

• 8.8 High severity

  manyfold: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-27635Feb 26, 2026Manyfold3d

  Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. Prior to version 0.133.0, when model render generation is enabled, a logged-in user can achieve RCE by uploading a ZIP containi