Threats Tagged 'ubuntu-cve-2026-103263'

Python Tornado versions before 6.5.9 have a path traversal vulnerability in StaticFileHandler. This flaw allows the handler to follow symbolic links inside the static root directory without verifying that the resolved target remains within the static root. An unauthenticated attacker can exploit this by requesting a symlink pointing outside the static directory to read sensitive files accessible to the process user, such as configuration files, private keys, and application secrets. The vulnerability has a CVSS score of 5.9, indicating medium severity.

CVE-2026-103263 is a high-severity vulnerability in Tornado's StaticFileHandler that allows unauthenticated attackers to read arbitrary files on the server by exploiting symbolic links within the static directory. The vulnerability arises because path validation uses os.path.abspath(), which does not resolve symbolic links, enabling access to files outside the intended directory. This can expose sensitive information such as configuration files, private keys, and application secrets. The issue affects Tornado versions prior to 6.5.9.