← Back

CVE-2026-40162

nvd nist
Published: Apr 10, 2026Modified: Jun 17, 2026

JSON object

Loading...
7.1
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L
Exploitability: 2.8 / Impact: 4.2
Source: security-advisories@github.com (Secondary)

Description

Bugsink is a self-hosted error tracking tool. In 2.1.0, an authenticated file write vulnerability was identified in Bugsink 2.1.0 in the artifact bundle assembly flow. A user with a valid authentication token could cause the application to write attacker-controlled content to a filesystem location writable by the Bugsink process. This vulnerability is fixed in 2.1.1.

Affected (1)

Products: Bugsink: Bugsink
Bugsink
1 product
Bugsink
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Bugsink
Version 2.1.0

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

Source: security-advisories@github.com
ProductRelease Notes
Source: security-advisories@github.com
MitigationVendor Advisory

Timeline

No history available yet.