ExploitPublished
NiceGUI 3.6.1 · Path Traversal
Source Exploit-DB RSS Feed
0
Severity
MediumRated by Threat Radar
Data as of 6 May 2026, 02:38 UTC
What to do
AI-suggested
Until an official fix is available, users should consider restricting access to the NiceGUI service and validating or sanitizing file path inputs to mitigate exploitation risk.
Description
NiceGUI 3.6.1 - Path Traversal
Indicators of compromise
Exploit source code
# Exploit Title: NiceGUI 3.6.1 - Path Traversal
# Author: Mohammed Idrees Banyamer
# Instagram: @banyamer_security
# GitHub: https://github.com/mbanyamer
# Date: 2025-06-06
# Tested on: NiceGUI <= 3.6.1 (Python 3.8–3.12 on Linux/Windows)
# CVE: CVE-2026-25732
#
# Affected Versions: <= 3.6.1 (fixed in 3.7.0)
#
# Type: Remote Arbitrary File Write / Path Traversal
# Platform: Web Application (Python / NiceGUI)
# Author Country: Jordan
# Weakness: CWE-22 (Improper Limitation of a Pathname to a Rest…References
Community reviews
Loading reviews…