Fehlerhafte Beschränkung eines Pfadnamens auf ein eingeschränktes Verzeichnis ('Path Traversal') in Crafty Controller

The impact of CVE-2026-0805 is significant due to the potential for both file tampering and remote code execution. An attacker exploiting this vulnerability could overwrite critical configuration files, leading to denial of service or system instability. More concerningly, successful exploitation could allow the attacker to execute arbitrary commands on the server, granting them complete control over the system. This could result in data breaches, malware installation, or further compromise of the network. The ability to traverse the file system makes this vulnerability particularly dangerous, as it bypasses typical access controls.

Organizations utilizing Crafty Controller versions 4.5.0 through 4.8.0, particularly those with remote access enabled or lacking robust authentication controls, are at risk. Shared hosting environments where multiple users share the same Crafty Controller instance are also particularly vulnerable.

1. 2026-01-30Disclosure

   disclosure

1. Reserviert2026-01-09
2. Veröffentlicht2026-01-30
3. Geändert2026-02-02
4. EPSS aktualisiert2026-03-23

The primary mitigation for CVE-2026-0805 is to upgrade Crafty Controller to version 4.8.0 or later, which contains the fix. If an immediate upgrade is not possible, consider implementing stricter access controls to the Backup Configuration component to limit the attacker's ability to traverse the file system. Review and restrict file permissions to prevent unauthorized modifications. Monitor system logs for suspicious activity, particularly attempts to access or modify files outside of expected directories. While a WAF might offer some protection, it's unlikely to fully mitigate the vulnerability without careful configuration and rule creation.