Thiagoralves vulnerabilities
We track 1 vulnerability in Thiagoralves products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 5, 2026.
1vulnerabilities
1critical
0high
0exploited
9.9average CVSS score
Latest Thiagoralves vulnerabilities
- 9.9 Critical severity
OpenPLC_v3: Improper Limitation of a Pathname to a Restricted Directory
OpenPLC Runtime v3's compile_program function (webserver/openplc.py) parses directives from uploaded Structured Text (.st) program files and writes the referenced content to with no validation that file_path stays within the ./core directory. A path-validation