---
id: "CVE-2026-126950"
page: "https://infrastack.ai/live/CVE-2026-126950"
kind: "vulnerability"
aliases: ["CVE-2026-126950"]
title: "Zipline: path traversal lets authenticated users delete arbitrary server files"
severity: "high"
cvss: 7.0
epss: null
exploited: false
status: "open"
category: "package"
products: [{"name": "Zipline", "fixed": [], "affected": "4.4.0 (NVD: through 4.4.0)", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["file-uploads", "localdatasource", "package", "self-hosted", "zipline"]
not_affected_if: ["managed-hosting", "no-untrusted-accounts"]
published_at: "2026-11-13T10:18:02+00:00"
first_seen_at: "2026-11-13T10:47:28+00:00"
updated_at: "2026-11-13T10:55:18+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-126950", "first_seen_at": "2026-11-13T10:47:28+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-11-13T10:55:18+00:00"}]
exploit_sources: []
---

# Zipline: path traversal lets authenticated users delete arbitrary server files

Link for people: https://infrastack.ai/live/CVE-2026-126950 (this .md is for agents)

Zipline through 4.4.0 trusts the x-zipline-file-extension header, so traversal sequences in it point file deletion at paths outside the upload directory. An attacker with an upload account can delete chosen files on the server, causing denial of service or data loss.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Zipline affected 4.4.0 (NVD: through 4.4.0) fixed no fixed version listed

## How to check

- Run Zipline 4.4.0 (the version the advisory lists as affected; NVD says 'through 4.4.0')?
- Check whether the instance uses the local datasource (the default filesystem storage; the advisory shows the unchecked delete in LocalDatasource).
- Check whether untrusted users can hold accounts that upload files and set an expiry (x-zipline-deletes-at).

## Fix

No patched version listed in the vendor advisory (Patched versions: None). Until a fix ships, restrict upload accounts to trusted users.

## Timeline

- 2026-11-13T10:47:28+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-126950
- 2026-11-13T10:55:18+00:00 analyst — Read GHSA-2wfm-prg7-x586: affected 4.4.0, patched versions None. Flaw sits in LocalDatasource.delete (join without containment); advisory says any datasource that doesn't constrain keys is also affected. Needs upload + expiry.

## Documents

- [advisory] Vendor advisory: github.com https://github.com/diced/zipline/security/advisories/GHSA-2wfm-prg7-x586
- [advisory] Third-party advisory: www.vulncheck.com https://www.vulncheck.com/advisories/zipline-through-4.4.0-path-traversal-arbitrary-file-delete-via-x-zipline-file-extension

## From the sources

Zipline through 4.4.0 contains a path traversal vulnerability that allows authenticated attackers to delete arbitrary server files by injecting traversal sequences via the x-zipline-file-extension header. Attackers can upload a file with a poisoned stored name and short expiry so LocalDatasource deletion removes chosen files, causing denial of service or data loss.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_