Skip to content
OpenAdvisories

Vendor

appwrite

4 known vulnerabilities.

Products

appwrite 2 templates 1 appwrite/appwrite 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-89036

    Appwrite < 2.0.0 Argument Injection via providerRootDirectory Parameter

    Appwrite before 2.0.0 contains an argument injection vulnerability that allows authenticated users with functions.write or sites.write permissions to execute arbitrary commands by injecting TAB characters into the providerRootDirectory parameter used to const…

    appwrite appwrite