{"id":"CVE-2026-112005","kind":"vulnerability","aliases":["CVE-2026-112005"],"related":[],"title":"WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote attackers to read and write…","description":"WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote attackers to read and write arbitrary host files by running DuckDB filesystem functions through the query editor. Attackers can log in to a DuckDB file without credentials and use read_text, read_blob, COPY ... TO or ATTACH to steal session.key and stored database credentials or overwrite files.","summary":"WhoDB (database admin web UI) lets an unauthenticated user open a DuckDB session and then run SQL (read_text, read_blob, COPY TO, ATTACH) in the query editor. That reads any file the WhoDB process can read and writes files anywhere it can write. The attacker can read /data/session.key and whodb.db, then decrypt every logged-in user's stored database credentials offline. WhoDB CE has no user accounts and listens on all interfaces by default. A full public PoC is in the vendor advisory.","severity":"critical","cvss":9.2,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"whodb","fixed":["0.135.0"],"affected":">= 0.104.0, < 0.135.0","ecosystem":"go"}],"ecosystems":[],"tags":["docker","duckdb","package","self-hosted","whodb"],"not_affected_if":["no-duckdb-connections","not-internet-exposed","version-0.135.0-or-later","version-below-0.104.0"],"how_to_check":"Run: docker inspect --format '{{.Config.Image}}' <container>, or check the image tag; any WhoDB 0.104.0 to 0.134.x is vulnerable. You are reachable if the WhoDB port (default 8080) is open to anyone untrusted, since DuckDB login needs no credential. Test: log in with source type DuckDB and run SELECT content FROM read_text('/data/session.key'); only on your own instance.","fix":"Upgrade to WhoDB 0.135.0 or later (docker pull clidey/whodb:0.135.0). If an exposed instance ran an affected version, rotate the database credentials users logged in with and delete session.key so a new one is generated (cautious step, the vendor doesn't state it). Until upgraded, don't expose WhoDB to untrusted networks. The release also fixes GHSA-jcvx-4v4m-p5v9 (TestSourceConnection bypass).","status":"open","published_at":"2026-10-18T12:17:12+00:00","first_seen_at":"2026-10-23T21:57:15+00:00","triaged_at":"2026-10-23T22:09:07+00:00","updated_at":"2026-10-23T23:26:35+00:00","category":"package","confidence":0.9,"triage":{"at":"2026-10-23T22:09:07Z","model":"claude-haiku-5-5","output":{"fix":"Upgrade WhoDB to version 0.135.0 or later, which the advisory lists as the first fixed release.\nRotate database credentials and session.key if an exposed instance ran a vulnerable version.","reach":"internet","impact":"high","summary":"WhoDB, a database admin web tool, has a path traversal flaw in its DuckDB support that lets remote users read and write arbitrary files on the host. An attacker can read session.key and stored database credentials, or overwrite files.","category":"package","who_cares":["whodb","self-hosted","duckdb","docker"],"confidence":0.7,"needs_auth":"no","worst_case":"Attacker reads secrets and overwrites host files remotely without credentials","analyst_note":"Check the NVD entry and WhoDB release notes for the fixed version and whether DuckDB support is needed to be exposed; sources do not give a how-to-check command.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["version-0.135.0-or-later","no-duckdb-connections"],"user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"critical"},"cost_usd":0.000478,"input_tokens":2796,"output_tokens":396,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Check the NVD entry and WhoDB release notes for the fixed version and whether DuckDB support is needed to be exposed; sources do not give a how-to-check command.","search":"'-112005':20A,23A '-2026':19A,22A '/data/session.key':80B '0.104.0':2A,118C '0.135.0':4A,120C 'account':100B 'admin':34B 'advisori':116B 'allow':11A,127C 'anywher':72B 'arbitrari':134C 'attach':55B,165C 'attack':13A,77B,129C,146C 'blob':52B,161C 'ce':96B 'contain':5A,121C 'copi':53B,162C 'credenti':93B,155C,172C 'cve':18A,21A 'databas':33B,92B,171C 'decrypt':84B 'default':107B 'docker':25B 'duckdb':26B,43B,139C,152C 'editor':59B,145C 'everi':85B 'file':63B,71B,136C,153C,175C 'filesystem':140C 'full':109B 'function':141C 'host':30B,135C 'interfac':105B 'let':37B 'listen':102B 'log':87B,148C 'logged-in':86B 'offlin':94B 'open':41B 'overwrit':174C 'packag':27B 'path':7A,123C 'poc':111B 'process':66B 'public':110B 'queri':58B,144C 'read':15A,49B,51B,61B,68B,79B,131C,158C,160C 'remot':12A,128C 'run':47B,138C 'self':29B 'self-host':28B 'session':44B 'session.key':168C 'sql':48B 'steal':167C 'store':91B,170C 'text':50B,159C 'travers':8A,124C 'ui':36B 'unauthent':39B 'use':157C 'user':40B,89B,99B 'vendor':115B 'vulner':9A,125C 'web':35B 'whodb':1A,24A,31B,32B,65B,95B,117C 'whodb.db':82B 'without':154C 'write':17A,70B,75B,133C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-18T12:17:12+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":1,"sources":[{"source":"nvd","external_id":"CVE-2026-112005","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112005","severity":null,"published_at":"2026-10-18T12:17:12+00:00","modified_at":"2026-10-22T03:16:32+00:00","first_seen_at":"2026-10-23T21:57:15+00:00","fetched_at":"2026-10-23T22:28:55+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-112005:444","url":null,"severity":null,"published_at":"2026-10-23T23:26:35+00:00","modified_at":"2026-10-23T23:26:35+00:00","first_seen_at":"2026-10-23T23:26:35+00:00","fetched_at":"2026-10-23T23:26:35+00:00","note":"Read vendor GHSA-x3h5-pr45-fx4r (clidey/whodb, includes full PoC) and 0.135.0 release notes. Affected >=0.104.0 <0.135.0, fixed 0.135.0. No exploitation seen; X has ~2 posts, none worth saving. NVD page was empty; CVE.org shows CVSS4 9.2."}],"documents":[{"id":1962,"url":"https://github.com/clidey/whodb/security/advisories/GHSA-x3h5-pr45-fx4r","title":"GHSA-x3h5-pr45-fx4r: WhoDB DuckDB host file read/write (with PoC)","kind":"advisory","source":"analyst","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":1962,"url":"https://github.com/clidey/whodb/security/advisories/GHSA-x3h5-pr45-fx4r","title":"GHSA-x3h5-pr45-fx4r: WhoDB DuckDB host file read/write (with PoC)","kind":"advisory","source":"analyst","text":null,"published_at":null,"relation":"poc","confidence":null,"note":null},{"id":1964,"url":"https://newreleases.io/project/github/clidey/whodb/release/0.135.0","title":"WhoDB 0.135.0 release","kind":"release","source":"analyst","text":null,"published_at":null,"relation":"fix","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}