Skip to content
OpenAdvisories

Vendor

openziti

9 known vulnerabilities.

Products

zrok 6 ziti-console 2 ziti 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.3
    CVE-2026-45576

    zrok copy writes attacker-controlled WebDAV paths outside the destination root

    zrok is software for sharing web services, files, and network resources. From 0.4.23 until 2.0.3, `zrok2 copy` stores attacker-controlled WebDAV or zrok drive paths such as /../outside.txt in the source inventory and passes them to FilesystemTarget.WriteStrea…

    openziti zrok github.com/openziti/zrok/v2 github.com/openziti/zrok Go
  • High 8.8
    CVE-2026-58165

    OpenZiti - Privilege Escalation to Admin via Unauthorized Enrollment Creation

    OpenZiti through 2.0.0, fixed in commit 3027fdf, contains a privilege escalation vulnerability that allows authenticated non-admin identities with fine-grained enrollment management permissions to create enrollments for any identity, including the default adm…

    openziti ziti
  • High 8.7
    CVE-2026-42275

    zrok: WebDAV drive backend follows symlinks outside DriveRoot, enabling host filesystem read/write

    zrok is software for sharing web services, files, and network resources. Prior to version 2.0.2, the zrok WebDAV drive backend (davServer.Dir) restricts path traversal through lexical normalization but does not prevent symlink following. When a symbolic link …

    openziti zrok github.com/openziti/zrok/v2 github.com/openziti/zrok Go
  • High 7.5
    CVE-2026-40303

    zrok allows unauthenticated DoS via unbounded memory allocation in striped session cookie parsing

    zrok is software for sharing web services, files, and network resources. Prior to version 2.0.1, endpoints.GetSessionCookie parses an attacker-supplied cookie chunk count and calls make([]string, count) with no upper bound before any token validation occurs. …

    openziti zrok github.com/openziti/zrok/v2 github.com/openziti/zrok Go
  • High 8.6
    CVE-2025-27501

    Server Side Request Forgery in Ziti Console

    OpenZiti is a free and open source project focused on bringing zero trust to any application. An endpoint on the admin panel can be accessed without any form of authentication. This endpoint accepts a user-supplied URL parameter to connect to an OpenZiti Cont…

    openziti ziti-console
  • High 8.2
    CVE-2025-27500

    Cross Site Scripting potential in Ziti Console

    OpenZiti is a free and open source project focused on bringing zero trust to any application. An endpoint(/api/upload) on the admin panel can be accessed without any form of authentication. This endpoint accepts an HTTP POST to upload a file which is then sto…

    openziti ziti-console