CVE-2026-58420

MediumCVSS 4.4

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.37%

30th percentile - higher than 30% of all known CVEs

Summary

The vulnerability allows Local File Inclusion via file:// URI in the Migration Restore function. An attacker can read arbitrary files from the server's filesystem.

Risk Assessment

Risk of exposing sensitive server files such as configurations, keys, or user data, potentially leading to full system compromise.

Recommendation

Block file:// URI handling in the migration process and update the software to a patched version.

Original NVD description (English source)

Local File Inclusion via file:// URI in Migration Restore