Skip to content
Threat Feed

Product

Crabbox < 0.9.0

1 brief RSS
high advisory

Crabbox Path Traversal Vulnerability (CVE-2026-45224)

Crabbox versions before 0.9.0 contain a path traversal vulnerability (CVE-2026-45224) in the Islo provider's workspace path resolution, allowing attackers to cause arbitrary file deletion and overwrite by crafting malicious .crabbox.yaml files with traversal sequences when sync.delete is enabled.

Crabbox < 0.9.0 path-traversal file-deletion file-overwrite CVE-2026-45224
2r 3t 1c