Skip to content
OpenAdvisories

Vendor

runtipi

6 known vulnerabilities.

Products

runtipi 6
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-55168 Public exploit

    Runtipi: Authenticated arbitrary file write via backup restore symlink planting

    Runtipi is a personal homeserver orchestrator. In 4.10.0 and earlier, Runtipi accepts symbolic links from an attacker-controlled backup archive and copies them into live application paths during the backup restore flow. An authenticated attacker can plant use…

    runtipi runtipi
  • Medium 6.5
    CVE-2026-47277

    Runtipi: Unauthenticated arbitrary file read through app-store logo symlinks

    Runtipi is a personal homeserver orchestrator. In versions 4.9.1 through 4.9.3, Runtipi serves marketplace app logos from files inside cloned app-store repositories through an unauthenticated endpoint, which leads to arbitrary file read through app-store logo…

    runtipi runtipi