Skip to content
Threat Feed
Subscribe

Product

Meshery (Before 1.0.57)

1 brief RSS
high threat

CVE-2026-65919 Unauthenticated Arbitrary File Read in Meshery

Meshery versions prior to 1.0.57 are vulnerable to an unauthenticated arbitrary file read due to a path traversal flaw in the /api/system/fileView and /api/system/fileDownload API endpoints, allowing attackers to read arbitrary files from the host filesystem without authentication by supplying path traversal sequences.

exploited Meshery path-traversal arbitrary-file-read web-vulnerability
1r 1t 1c