CVE-2026-5344
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
In Textpattern up to version 4.9.1, the function mt_uploadImage in file rpc/TXP_RPCServer.php (XML-RPC Handler component) is vulnerable to path traversal via manipulation of the file.name argument. Remote exploitation is possible, and the exploit has been publicly disclosed.
Risk Assessment
An attacker can remotely read or write files outside the allowed directory, potentially leading to data leakage or server compromise.
Recommendation
Apply available patches immediately or temporarily disable the XML-RPC component if possible.
Original NVD description (English source)
A security vulnerability has been detected in Textpattern up to 4.9.1. Affected by this vulnerability is the function mt_uploadImage of the file rpc/TXP_RPCServer.php of the component XML-RPC Handler. The manipulation of the argument file.name leads to path traversal. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor confirmed the issue and will provide a fix in the upcoming release.