Skip to content
OpenAdvisories

Product · mynaparrot

plugNmeet-server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-108158

    plugNmeet Server through 2.5.2 Path Traversal via /api/whiteboard/convert

    plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows any meeting participant to read server files via crafted filePath values. Attackers can supply ../ sequences so text or office documents a…

    mynaparrot plugNmeet-server