Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Runtipi is a personal homeserver orchestrator. Starting in version 4.5.0 and prior to version 4.7.2, an unauthenticated Path Traversal vulnerability in the `UserConfigController` allows any remote user to overwrite the system's `docker-compose.yml` configuration file. By exploiting insecure URN parsing, an attacker can replace the primary stack configuration with a malicious one, resulting in full Remote Code Execution (RCE) and host filesystem compromise the next time the instance is restarted by the operator. Version 4.7.2 fixes the vulnerability.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-25116 Unauthenticated Path Traversal in Runtipi Leading to Remote Code Execution https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25116
Post summary
The post announces CVE‑2026‑25116 as an unauthenticated path‑traversal flaw in Runtipi that permits remote code execution.
CVE-2026-25116 Runtipi is a personal homeserver orchestrator. Starting in version 4.5.0 and prior to version 4.7.2, an unauthenticated Path Traversal vulnerability in the `UserConfi… https://www.cve.org/CVERecord?id=CVE-2026-25116
Post summary
The statement announces a path traversal flaw in Runtipi (v4.5.0–4.7.2) but does not provide any PoC, exploit code, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | runtipi | runtipi | - | - | - |