CVE-2026-66653

HighCVSS 8.1

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

28th percentile - higher than 28% of all known CVEs

Summary

Unauthenticated Local File Inclusion in Barista plugin versions up to 2.5.1. An attacker without authentication can include local files from the server.

Risk Assessment

Possibility to read sensitive files from the server, such as configuration files, which may lead to data leakage and further system compromise.

Recommendation

Update the Barista plugin to the latest available version that fixes this vulnerability.

Original NVD description (English source)

Unauthenticated Local File Inclusion in Barista <= 2.5.1 versions.