CVE-2026-67200: high-severity vulnerability in perspective-dev perspective
Perspective 5.0.0 Path Traversal via cwd_static_file_handler
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
41Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 8.7epss 0.9%
Perspective 5.0.0 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files from the server filesystem by including literal ../ segments in HTTP request URL paths. Attackers can bypass the insufficient query-string-stripping sanitization to traverse outside the configured asset root directory and retrieve sensitive files such as system credentials and application secrets, with results exposed cross-origin due to a wildcard Access-Control-Allow-Origin header set on all responses.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
perspective-dev · perspectivepublic PoCs found — 1
cve_referencechristbowel.com/blog/perspective-5-0-0-five-cves/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — perspective-dev perspective
In the same product, most dangerous first.
CVE-2026-67195HIGHPerspective 5.0.0 RCE via eval() Expression InjectionEPSS 1.2%CVE-2026-67199HIGHPerspective 5.0.0 DoS via Loop Expression EvaluationEPSS 0.5%CVE-2026-67198HIGHPerspective 5.0.0 DoS via VirtualServer Protocol DispatcherEPSS 0.3%CVE-2026-67196MEDIUMPerspective 5.0.0 XSS via Debug Plugin innerHTML InterpolationEPSS 0.3%