Filtered by vendor Builderio
Subscriptions
Filtered by product Gpt-crawler
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-82286 | 1 Builderio | 1 Gpt-crawler | 2026-08-31 | 8.6 High |
| gpt-crawler through 1.5.1 fails to validate the outputFileName parameter in the POST /crawl endpoint, allowing unauthenticated attackers to write arbitrary files to any filesystem path. Attackers can supply absolute paths or parent-directory segments to overwrite existing files with content sourced from attacker-controlled URLs. | ||||
Page 1 of 1.