CVE Catalog
CVE-2026-66381
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0.29%
21th percentile - higher than 21% of all known CVEs
Summary
A repository reader with cache-deploy permission may access content outside a configured upstream path under specific conditions.
Risk Assessment
This could expose data that should not be accessible, breaking repository isolation.
Recommendation
Review cache-deploy permissions and restrict access to upstream paths.
Original NVD description (English source)
A repository reader with cache-deploy permission may access content outside a configured upstream path under specific conditions.