Vulnerability · Published Sep 25, 2026 · Assigned by VulnCheck

CVE-2026-100372ClipBucket v5 before 5.5.3-#197 Path Traversal via template_editor.php

High 7.2

In plain English

A high-severity path traversal in clipbucket-v5 from MacWarrior. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 67% of all known vulnerabilities).

Severity (CVSS 3.1)7.2High

Exploit odds (30 days)1.1%top 33.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

ClipBucket v5 before 5.5.3-#197 contains a path traversal vulnerability in the admin template editor that allows authenticated administrators to overwrite PHP files by supplying directory traversal sequences in the folder parameter. Attackers with manage_template_access permission can traverse outside the layout directory to modify executable PHP files and achieve remote code execution as the web server user.

Affected products (as reported)

Vendor	Product	Versions
MacWarrior	clipbucket-v5	0 – before 5.5.3-#197

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References

https://hackmd.io/@leediay/S1AIRjzqfx exploit, third-party-advisory
https://github.com/MacWarrior/clipbucket-v5/commit/f31de49b2194482ffef7147aa1e9b1c8f0f04eb7 patch
https://github.com/MacWarrior/clipbucket-v5/blob/61cce55ab26ef88fb782dfde47b44c17c56978cd/upload/admin_area/template_editor.php#L44-L69 technical-description
clipbucket-v5 5.5.3-%23197 Release Notes release-notes
https://github.com/MacWarrior/clipbucket-v5 product
VulnCheck Advisory: ClipBucket v5 before 5.5.3-#197 Path Traversal via template_editor.php third-party-advisory