CVE-2026-39345
MediumCVSS 4.9Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
OrangeHRM Open Source versions 5.0 to 5.8 fail to restrict email template file resolution to the intended plugins directory, allowing an authenticated attacker who can influence the template path to read arbitrary local files. This is fixed in version 5.8.1.
Risk Assessment
The risk involves the ability to read arbitrary local files by an authenticated attacker, potentially leading to exposure of sensitive system data.
Recommendation
Immediately upgrade OrangeHRM to version 5.8.1 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
OrangeHRM is a comprehensive human resource management (HRM) system. From 5.0 to 5.8, OrangeHRM Open Source fails to restrict email template file resolution to the intended plugins directory, allowing an authenticated actor who can influence the template path to read arbitrary local files. This vulnerability is fixed in 5.8.1.