CVE-2026-42196Critical▾ Midnightdjango-s3file is vulnerable to relative path traversal
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 52.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 27.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
0.6%
S3FileMiddleware is vulnerable to relative path traversal attacks, where an attacker can use a modified request to escape pre-signed upload locations and have the Django application load files from random locations into request.FILES
Depending on how files are handled, this may lead to confidentiality and integrity issues.
Django-S3File urges all users to update to a patched version >=7.0.2.
django-s3file < 7.0.2Upgrade to a patched release:
django-s3file 7.0.2Connected by shared product, vendor, weakness, or advisory.
CVE-2022-24840Critical· 9.1Path Traversal in django-s3file
CVE-2024-8551Critical· 9.1AgentScope path traversal vulnerability in save-workflow
CVE-2024-1728High· 8.1Gradio allows users to access arbitrary files
CVE-2024-11042Critical· 9.1InvokeAI Arbitrary File Deletion vulnerability
CVE-2022-31573Critical· 9.3ChainerRL Visualizer 0.1.1 vulnerable to Path Traversal via unsafe use of send_file function
CVE-2024-10902Critical· 9.1DB-GPT vulnerable to Arbitrary File Upload with Path Traversal