CVE-2026-126951 · Package
NO FIX YET
Zipline through 4.4.0 has a path traversal flaw in GET /api/user/files/:id/raw that treats the id as a datasource key when a fallback applies. An authenticated user can send encoded traversal sequences to escape the uploads directory and read files such as /etc/shadow.
first public Jan 20, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Self-hosted Zipline instances at version 4.4.0 or earlier are exposed when a logged-in user can call the raw file endpoint. Attackers need an account first, and the flaw reads files from the server's filesystem through the Local datasource path. Instances that run only as a managed service, or that do not allow user accounts, can skip it.
Not affected if auth-required, managed-hosting
Who cares self-hosted, zipline
4.4.0 range in the sources.No fix yet, per the sources.
Zipline through 4.4.0 contains a path traversal vulnerability that allows authenticated users to read arbitrary server files by abusing a fallback treating the :id parameter as a datasource key. Attackers can send encoded traversal sequences in the :id of GET /api/user/files/:id/raw to escape the Local datasource uploads directory and read files like /etc/shadow.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.