Skip to content
OpenAdvisories

Vendor

AlistGo

2 known vulnerabilities.

Products

alist 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-25161

    Alist vulnerable to Path Traversal in multiple file operation handlers

    Alist is a file list program that supports multiple storages, powered by Gin and Solidjs. Prior to version 3.57.0, the application contains path traversal vulnerability in multiple file operation handlers. An authenticated attacker can bypass directory-level …

    AlistGo alist github.com/alist-org/alist/v3 github.com/alist-org/alist Go