CVE-2026-102810
HighCVSS 7.5Summary
Marmite through 0.4.2 contains a path traversal vulnerability in the development server started by --serve that allows unauthenticated attackers to read arbitrary files. The handle_request function in src/server.rs fails to reject .. segments after percent-decoding and joining the request path to the output folder, enabling attackers to request encoded traversal sequences to access files readable by the marmite process.
Risk Assessment
An unauthenticated attacker can read arbitrary files accessible to the marmite process, potentially leading to disclosure of sensitive information.
Recommendation
Upgrade Marmite to a patched version. If not available, do not run the development server in production environments.
Other vulnerabilities in Marmite
Original NVD description (English source)
Marmite through 0.4.2 contains a path traversal vulnerability in the development server started by --serve that allows unauthenticated attackers to read arbitrary files. The handle_request function in src/server.rs fails to reject .. segments after percent-decoding and joining the request path to the output folder, enabling attackers to request encoded traversal sequences to access files readable by the marmite process.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS