Skip to content

CVE-2026-129167

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
November 14, 2026
Last Seen
November 14, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Path Traversal Vulnerability in Seafile SeaDoc Converter78.0

Seafile SeaDoc converter versions 2.0.4 to 2.0.10 and 3.0.0 to 3.0.7 are affected by CVE-2026-129167, an absolute path traversal vulnerability. This flaw allows unauthenticated attackers with a public token to execute arbitrary code by supplying an absolute filename to a specific API endpoint. Succe...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Zero-day ExploitCWE-22 - Path TraversalCWE-78 - OS Command InjectionT1059.006 - PythonT1059 - Command and Scripting InterpreterT1190 - Exploit Public-Facing ApplicationDocker