CVE-2026-100372: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in MacWarrior clipbucket-v5
ClipBucket v5 before 5.5.3-#197 contains a path traversal vulnerability in the admin template editor that allows authenticated administrators to overwrite PHP files by supplying directory traversal sequences in the folder parameter. Attackers with manage_template_access permission can traverse outside the layout directory to modify executable PHP files and achieve remote code execution as the web server user.
AI Analysis
Technical Summary
CVE-2026-100372 describes a path traversal vulnerability in ClipBucket v5 prior to version 5.5.3-#197. The vulnerability exists in the admin template editor component, where the folder parameter is not properly restricted. Authenticated users with manage_template_access permission can traverse directories outside the layout directory and overwrite PHP files. This can lead to remote code execution under the privileges of the web server user.
Potential Impact
An attacker with authenticated administrator access and the manage_template_access permission can exploit this vulnerability to overwrite executable PHP files. This can result in remote code execution on the server with the web server's privileges, potentially compromising the entire application and underlying system.
Mitigation Recommendations
The vulnerability affects ClipBucket v5 versions before 5.5.3-#197. Users should upgrade to version 5.5.3-#197 or later where this issue is fixed. Patch status is not explicitly confirmed in the provided data, so verify the vendor advisory for official remediation guidance.
CVE-2026-100372: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in MacWarrior clipbucket-v5
Description
ClipBucket v5 before 5.5.3-#197 contains a path traversal vulnerability in the admin template editor that allows authenticated administrators to overwrite PHP files by supplying directory traversal sequences in the folder parameter. Attackers with manage_template_access permission can traverse outside the layout directory to modify executable PHP files and achieve remote code execution as the web server user.
CVSS v4.0
Score 8.6high
Affected software
MacWarrior
clipbucket-v5
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-100372 describes a path traversal vulnerability in ClipBucket v5 prior to version 5.5.3-#197. The vulnerability exists in the admin template editor component, where the folder parameter is not properly restricted. Authenticated users with manage_template_access permission can traverse directories outside the layout directory and overwrite PHP files. This can lead to remote code execution under the privileges of the web server user.
Potential Impact
An attacker with authenticated administrator access and the manage_template_access permission can exploit this vulnerability to overwrite executable PHP files. This can result in remote code execution on the server with the web server's privileges, potentially compromising the entire application and underlying system.
Mitigation Recommendations
The vulnerability affects ClipBucket v5 versions before 5.5.3-#197. Users should upgrade to version 5.5.3-#197 or later where this issue is fixed. Patch status is not explicitly confirmed in the provided data, so verify the vendor advisory for official remediation guidance.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-09-25T19:25:59.651Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ab6d01ff7a7c54106357d89
Added to database: 09/25/2026, 19:48:47 UTC
Last enriched: 09/25/2026, 20:02:39 UTC
Last updated: 09/26/2026, 02:40:52 UTC
Views: 9
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.