Rustypaste - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/vendors/rustypaste/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSun, 13 Sep 2026 11:26:13 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgPath Traversal Vulnerability in rustypastehttps://feed.craftedsignal.io/briefs/2026-09-rustypaste-path-traversal/Sun, 13 Sep 2026 11:26:13 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-09-rustypaste-path-traversal/rustypaste versions prior to 0.18.1 contain a path traversal vulnerability that allows attackers to write files to arbitrary locations by manipulating the custom filename HTTP header.rustypaste versions prior to 0.18.1 are affected by a path traversal vulnerability (CVE-2026-90774) stemming from improper input validation. The application validates the destination path before processing the optional custom filename header, which creates a race condition or logic flaw where the custom filename can contain directory traversal sequences (such as ../). This allows an attacker to bypass intended directory restrictions and write files outside of the configured upload directory. An unauthenticated attacker can exploit this to overwrite critical system configuration files or place malicious scripts (e.g., web shells) in executable directories, potentially leading to remote code execution or complete system compromise. This issue affects all rustypaste deployments using versions earlier than 0.18.1.

Impact

Successful exploitation allows for arbitrary file write outside the designated upload directory. This could lead to a full system compromise if an attacker overwrites sensitive files or uploads malicious payloads to a location that is subsequently executed by the server or system processes.

Recommendation

  • Upgrade all rustypaste instances to version 0.18.1 or later to remediate CVE-2026-90774.
  • Review server-side upload directory permissions to ensure the application runs with the least privilege necessary, minimizing the impact of potential file-write vulnerabilities.
  • Audit access logs for suspicious HTTP requests containing directory traversal sequences (e.g., '../') within custom headers or filename parameters.
]]>highadvisorypath-traversalvulnerabilityremote-code-execution