Skip to content
OpenAdvisories

Product · HytaleModding

wiki

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-34735

    Hytale Modding Vulnerable to Remote Code Execution via File Upload Bypass in `FileController`

    The Hytale Modding Wiki is a free service for Hytale mods to host their documentation & wikis. In version 1.2.0 and prior, the quickUpload() endpoint validates uploaded files by checking their MIME type (via PHP's finfo, which inspects file contents) but cons…

    HytaleModding wiki