CERT24CVE-2026-118756 — gopass before 1.17.0: Path Traversal via fs Storage Prune and IsDirLoading data…
CERT24Threat Observatory
Period

CVE-2026-118756 — gopass before 1.17.0: Path Traversal via fs Storage Prune and IsDir

gopass versions before 1.17.0 contain a path traversal vulnerability in the filesystem storage backend. Attackers can use ../ entry names to delete directories outside the password store.

← Back to intelligence

CVE-2026-118756 — gopass before 1.17.0: Path Traversal via fs Storage Prune and IsDir

gopass versions before 1.17.0 contain a path traversal vulnerability in the filesystem storage backend. Attackers can use ../ entry names to delete directories outside the password store.