by Kastro
Paper/Archive/CVE-2026-6057

CVE-2026-6057

FalkorDB FalkorDB Browser — Unauthenticated Path Traversal in FalkorDB Browser Leads to Remote Code Execution

EPSS 0.9%CVSS 9.8
critical.is priorityof 100
42
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 60.5.605 × 2012.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

FalkorDB Browser 1.9.3 contains an unauthenticated path traversal vulnerability in the file upload API that allows remote attackers to write arbitrary files and achieve remote code execution.

Affected

ProductAffectedFixed inSource
FalkorDB Browser1.9.3–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refgithub.com/FalkorDB/falkordb-browserrefgithub.com/FalkorDB/falkordb-browser/pull/1611