CVE-2026-102810: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in rochacbruno marmite
Marmite through 0.4.2 contains a path traversal vulnerability in the development server started by --serve that allows unauthenticated attackers to read arbitrary files. The handle_request function in src/server.rs fails to reject .. segments after percent-decoding and joining the request path to the output folder, enabling attackers to request encoded traversal sequences to access files readable by the marmite process.
AI Analysis
Technical Summary
CVE-2026-102810 describes a path traversal vulnerability in rochacbruno's Marmite development server (versions up to 0.4.2). The issue occurs in the handle_request function within src/server.rs, which fails to correctly sanitize request paths after percent-decoding. Attackers can craft encoded traversal sequences to bypass directory restrictions and read arbitrary files accessible to the Marmite process. This vulnerability affects the development server started with the --serve option and requires no authentication.
Potential Impact
An unauthenticated attacker can exploit this vulnerability to read arbitrary files on the system with the permissions of the Marmite process. This could lead to exposure of sensitive information accessible to the application user. There is no indication of privilege escalation or remote code execution from the provided data.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid using the development server with the --serve option in untrusted environments or restrict access to trusted users only.
CVE-2026-102810: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in rochacbruno marmite
Description
Marmite through 0.4.2 contains a path traversal vulnerability in the development server started by --serve that allows unauthenticated attackers to read arbitrary files. The handle_request function in src/server.rs fails to reject .. segments after percent-decoding and joining the request path to the output folder, enabling attackers to request encoded traversal sequences to access files readable by the marmite process.
CVSS v4.0
Score 8.7high
Affected software
rochacbruno
marmite
pkg:cargo/github/rochacbruno/marmiteRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-102810 describes a path traversal vulnerability in rochacbruno's Marmite development server (versions up to 0.4.2). The issue occurs in the handle_request function within src/server.rs, which fails to correctly sanitize request paths after percent-decoding. Attackers can craft encoded traversal sequences to bypass directory restrictions and read arbitrary files accessible to the Marmite process. This vulnerability affects the development server started with the --serve option and requires no authentication.
Potential Impact
An unauthenticated attacker can exploit this vulnerability to read arbitrary files on the system with the permissions of the Marmite process. This could lead to exposure of sensitive information accessible to the application user. There is no indication of privilege escalation or remote code execution from the provided data.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid using the development server with the --serve option in untrusted environments or restrict access to trusted users only.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-09-29T17:11:36.468Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6abbf57794a11e1e08e480d3
Added to database: 09/29/2026, 17:29:27 UTC
Last enriched: 09/29/2026, 17:40:17 UTC
Last updated: 09/29/2026, 18:20:12 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.