LaraDashboard before 1.4.8 contains a path traversal vulnerability that allows unauthenticated attackers to read JSON files by manipulating the… (CVE-2026-105125)

The vulnerability in LaraDashboard before version 1.4.8 is a path traversal flaw (CWE-22) that enables unauthenticated attackers to read arbitrary JSON files by manipulating the {lang} route segment in the URL. Specifically, on Windows hosts, URL-encoded backslash sequences like ..%5C can be used to escape the resources/lang directory and access files outside the intended path, including application JSON files such as composer.json. This vulnerability has a CVSS 3.1 base score of 3.7, indicating a medium severity with network attack vector, high attack complexity, no privileges required, no user interaction, and limited confidentiality impact.

An attacker can read arbitrary JSON files on the affected system without authentication. The confidentiality impact is limited to information disclosure of JSON files accessible via path traversal. There is no impact on integrity or availability. The vulnerability requires high attack complexity and does not allow privilege escalation or code execution.

A fix is available in LaraDashboard version 1.4.8. Users should upgrade to version 1.4.8 or later to remediate this vulnerability. No other mitigation guidance is provided or necessary as the vulnerability is addressed by the official patch.