---
id: "CVE-2026-126949"
page: "https://infrastack.ai/live/CVE-2026-126949"
kind: "vulnerability"
aliases: ["CVE-2026-126949"]
title: "Zipline: file rename path traversal lets users overwrite other uploads"
severity: "high"
cvss: 7.0
epss: null
exploited: false
status: "open"
category: "package"
products: [{"name": "Zipline", "fixed": [], "affected": "4.4.0 (advisory); NVD: through 4.4.0", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["local-datasource", "package", "path-traversal", "self-hosted", "zipline"]
not_affected_if: ["no-untrusted-users", "s3-datasource", "single-user"]
published_at: "2026-11-13T10:18:02+00:00"
first_seen_at: "2026-11-13T10:47:28+00:00"
updated_at: "2026-11-13T10:55:22+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-126949", "first_seen_at": "2026-11-13T10:47:28+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-11-13T10:55:22+00:00"}]
exploit_sources: []
---

# Zipline: file rename path traversal lets users overwrite other uploads

Link for people: https://infrastack.ai/live/CVE-2026-126949 (this .md is for agents)

Zipline through 4.4.0 fails to sanitize file names in its PATCH /api/user/files/:id rename endpoint. An authenticated user can submit a name such as ../uploads/victim.txt to overwrite other users' uploaded files.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Zipline affected 4.4.0 (advisory); NVD: through 4.4.0 fixed no fixed version listed

## How to check

Run Zipline 4.4.0 or earlier with the Local datasource (DATASOURCE_TYPE=local, uploads on disk)? Then you are in scope. Check the version under Dashboard > About or the image tag. S3 storage is not covered by the advisory's PoC. Also check later versions: the advisory lists only 4.4.0 and the release notes do not say whether the rename path was fixed.

## Fix

The advisory GHSA-rw9m-7mvm-6gxp (Jan 20, 2026) lists no patched version. Releases up to v4.8.3 (Nov 8) do not name this bug in their notes, so a fix is unconfirmed. Until one is confirmed, limit who can sign in and rename files.

## Timeline

- 2026-11-13T10:47:28+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-126949
- 2026-11-13T10:55:22+00:00 analyst — Read GHSA-rw9m-7mvm-6gxp: affected 4.4.0, patched none, PoC in advisory (no separate PoC link), requires an authenticated user with high privileges per CVSS 4.0 (PR:H). The 4.8.x release notes do not mention this fix. Not exploited as far as known. No social search done (tier B).

## Documents

- [advisory] Vendor advisory: github.com https://github.com/diced/zipline/security/advisories/GHSA-rw9m-7mvm-6gxp
- [advisory] Third-party advisory: www.vulncheck.com https://www.vulncheck.com/advisories/zipline-through-4.4.0-path-traversal-file-overwrite-via-patch-api-user-files-id

## From the sources

Zipline through 4.4.0 contains a path traversal vulnerability in the PATCH /api/user/files/:id rename endpoint that allows authenticated users to overwrite existing uploads by supplying unsanitized names. Attackers can submit names like ../uploads/victim.txt that bypass the raw-string database uniqueness check but normalize via path.join(), causing fs.rename() to replace other files' contents.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_