CVE-2026-27585mediumCWE-20

Caddy's improper sanitization of glob characters in file matcher may lead to bypassing security protections

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.9epss 0.3%

probabilidade de exploração

0.3%top 75% das CVEs

exploração observada

nãonenhuma fonte reporta

Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, the path sanitization routine in file matcher doesn't sanitize backslashes which can lead to bypassing path related security protections. It affects users with specific Caddy and environment configurations. Version 2.11.1 fixes the issue.

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P

Produtos afetados

caddyserver · caddy

Referências

https://github.com/caddyserver/caddy/blob/68d50020eef0d4c3398b878f17c8092ca5b58ca0/modules/caddyhttp/fileserver/matcher.go#L361 https://github.com/caddyserver/caddy/blob/68d50020eef0d4c3398b878f17c8092ca5b58ca0/modules/caddyhttp/fileserver/matcher.go#L398 https://github.com/caddyserver/caddy/releases/tag/v2.11.1 https://github.com/caddyserver/caddy/security/advisories/GHSA-4xrr-hq4w-6vf4