Skip to content
OpenAdvisories

Vendor

runtipi

6 known vulnerabilities.

Products

runtipi 6
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-55168 Public exploit

    Runtipi: Authenticated arbitrary file write via backup restore symlink planting

    Runtipi is a personal homeserver orchestrator. In 4.10.0 and earlier, Runtipi accepts symbolic links from an attacker-controlled backup archive and copies them into live application paths during the backup restore flow. An authenticated attacker can plant use…

    runtipi runtipi