वोसिफरोस अनऑथेंटिकेटेड रिमोट पाथ ट्रावर्सल (CSRF के माध्यम से RCE)

The impact of this vulnerability is severe. An attacker can leverage the Path Traversal flaw to read sensitive files from the server's filesystem. This could include configuration files, database credentials, source code, or other confidential data. The unauthenticated nature of the API, combined with the overly permissive CORS policy (allowing all origins), significantly increases the attack surface. An attacker could potentially gain complete control over the affected system by exploiting this vulnerability to read and modify critical files. The lack of authentication means no user interaction is required for exploitation.

Organizations utilizing Vociferous for offline speech-to-text processing, particularly those with publicly accessible APIs or those running Vociferous on shared hosting environments, are at significant risk. Systems with older, unpatched versions of Vociferous are especially vulnerable.

• python / server:

import os
import json

# Check for the vulnerable code in src/api/system.py
with open('src/api/system.py', 'r') as f:
    content = f.read()
    if 'os.path.join' in content and 'filename' in content and 'export_file' in content:
        print('Potential CVE-2026-27897 vulnerability detected.')

• generic web:

curl -X POST -d '{"filename": "../../../../etc/passwd", "content": "test"}' http://<target_host>/export_file

• generic web:

# Check for file access attempts in access logs
grep -iE 'export_file|../' /var/log/apache2/access.log

1. 2026-03-11Disclosure

   disclosure

1. आरक्षित2026-02-24
2. प्रकाशित2026-03-11
3. EPSS अद्यतन2026-03-23

The primary mitigation for CVE-2026-27897 is to upgrade Vociferous to version 4.4.2 or later, which includes the necessary filename validation fixes. If upgrading immediately is not possible, consider implementing a Web Application Firewall (WAF) rule to block requests containing suspicious characters in the filename parameter. Additionally, restrict the CORS configuration in app.py to only allow trusted origins. Thoroughly review the src/api/system.py file for any other potential vulnerabilities.