{"id":"CVE-2026-118693","kind":"vulnerability","aliases":["CVE-2026-118693"],"related":[],"title":"CherryTree: crafted documents can embed local files like SSH keys","description":"CherryTree through 1.7.2 contains a path traversal vulnerability in CtStorageXmlHelper::_create_image_from_xml that trusts unvalidated embedded-file 'filename' attributes in XML documents. Attackers can craft a .ctd, .ctz, or .ctx document with an absolute or ~/ filename and no data, so saving embeds files like ~/.ssh/id_rsa into the document.","summary":"CherryTree 1.7.2 and earlier trusts the filename attribute of embedded files in .ctd, .ctz and .ctx documents, including absolute and ~/ paths. A crafted document makes saving pull files such as ~/.ssh/id_rsa into the document, so the person who opens it can read those files.","severity":"medium","cvss":5.6,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["cherrytree","desktop-users","other"],"not_affected_if":["newer-version","only-own-documents"],"how_to_check":"- Check the installed CherryTree version against `1.7.2`; the sources say versions through 1.7.2 are affected.\n- Treat any .ctd, .ctz or .ctx file from an untrusted source as suspect before opening or saving it.","fix":null,"status":"open","published_at":"2026-10-28T22:17:13+00:00","first_seen_at":"2026-10-28T22:35:34+00:00","triaged_at":"2026-10-28T22:37:03+00:00","updated_at":"2026-10-28T22:37:03+00:00","category":"other","confidence":0.7,"triage":{"at":"2026-10-28T22:37:03Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"CherryTree: crafted documents can embed local files like SSH keys","impact":"medium","summary":"CherryTree 1.7.2 and earlier trusts the filename attribute of embedded files in .ctd, .ctz and .ctx documents, including absolute and ~/ paths. A crafted document makes saving pull files such as ~/.ssh/id_rsa into the document, so the person who opens it can read those files.","category":"other","nicknames":[],"who_cares":["cherrytree","desktop-users"],"confidence":0.7,"needs_auth":"no","worst_case":"Attacker reads local files such as SSH private keys on save.","analyst_note":"Find the fixed CherryTree release and its changelog (NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-118693 or upstream project) to fill in the fix and a precise version check.","how_to_check":"- Check the installed CherryTree version against `1.7.2`; the sources say versions through 1.7.2 are affected.\n- Treat any .ctd, .ctz or .ctx file from an untrusted source as suspect before opening or saving it.","needs_analyst":true,"not_affected_if":["only-own-documents","newer-version"],"who_is_affected":"Anyone who opens and saves CherryTree documents received from outside their team can be affected, because the flaw is in how the document's embedded files are read on save. Teams that only use their own documents, or run a version later than 1.7.2 if the sources confirm a fix, can skip it.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"medium"},"cost_usd":0.000999,"input_tokens":3369,"output_tokens":1325,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-118693':13A,16A '-2026':12A,15A '/.ssh/id_rsa':51B,112C '1.7.2':22B,67C 'absolut':39B,101C 'attack':90C 'attribut':28B,86C 'cherrytre':1A,17B,21B,65C 'contain':68C 'craft':2A,43B,92C 'creat':75C 'ctd':33B,94C 'ctstoragexmlhelp':74C 'ctx':36B,97C 'ctz':34B,95C 'cve':11A,14A 'data':106C 'desktop':19B 'desktop-us':18B 'document':3A,37B,44B,54B,89C,98C,115C 'earlier':24B 'emb':5A,109C 'embed':30B,83C 'embedded-fil':82C 'file':7A,31B,48B,64B,84C,110C 'filenam':27B,85C,103C 'imag':76C 'includ':38B 'key':10A 'like':8A,111C 'local':6A 'make':45B 'open':59B 'path':41B,70C 'person':57B 'pull':47B 'read':62B 'save':46B,108C 'ssh':9A 'travers':71C 'trust':25B,80C 'unvalid':81C 'user':20B 'vulner':72C 'xml':78C,88C","nicknames":[],"mitigations":[],"who_affected":"Anyone who opens and saves CherryTree documents received from outside their team can be affected, because the flaw is in how the document's embedded files are read on save. Teams that only use their own documents, or run a version later than 1.7.2 if the sources confirm a fix, can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T22:17:13+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118693","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118693","severity":null,"published_at":"2026-10-28T22:17:13+00:00","modified_at":"2026-10-28T22:17:13+00:00","first_seen_at":"2026-10-28T22:35:34+00:00","fetched_at":"2026-10-28T22:35:34+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}