Skip to content
OpenAdvisories
High · 7.3 CVE-2026-8757 EUVD-2026-30703GHSA-cpvr-wrmg-c3qm

adenhq hive Delete Request routes_sessions.py _read_events_tail path traversal

Published May 17, 2026 · Updated May 18, 2026 · Assigned by VulDB

Description

A vulnerability was found in adenhq hive up to 0.11.0. This affects the function _read_events_tail of the file core/framework/server/routes_sessions.py of the component Delete Request Handler. Performing a manipulation results in path traversal. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

VendorProductAffectedFixed
adenhq hive 0.1, 0.2, 0.3, 0.4, 0.5, 0.6, 0.7, 0.8, 0.9, 0.10, 0.11.0 —

References