CVE-2026-35174
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
Chyrp Lite prior to 2026.01 contains a path traversal vulnerability in the administration console that allows an administrator or a user with Change Settings permission to change the uploads path to any folder. This allows downloading any file on the server, including config.json.php with database credentials, and overwriting critical system files.
Risk Assessment
An attacker can access sensitive files and overwrite critical system files, leading to remote code execution.
Recommendation
Update Chyrp Lite to version 2026.01 or later, which fixes the path traversal vulnerability.
Original NVD description (English source)
Chyrp Lite is an ultra-lightweight blogging engine. Prior to 2026.01, a path traversal vulnerability exists in the administration console that allows an administrator or a user with Change Settings permission to change the uploads path to any folder. This vulnerability allows the user to download any file on the server, including config.json.php with database credentials and overwrite critical system files, leading to remote code execution. This vulnerability is fixed in 2026.01.