Vulnerability · Published Feb 4, 2026 · Assigned by GitHub_M

CVE-2026-25575NavigaTUM has a Path Traversal Vulnerability in the propose_edits functionality

High 8.8

In plain English

A high-severity security flaw in NavigaTUM from TUM-Dev. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities).

Severity (CVSS 4.0)8.8High

Exploit odds (30 days)0.5%top 55.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

NavigaTUM is a website and API to search for rooms, buildings and other places. Prior to commit 86f34c7, there is a path traversal vulnerability in the propose_edits endpoint allows unauthenticated users to overwrite files in directories writable by the application user (e.g., /cdn). By supplying unsanitized file keys containing traversal sequences (e.g., ../../) in the JSON payload, an attacker can escape the intended temporary directory and replace public facing images or fill the server's storage. This issue has been patched via commit 86f34c7.

Affected products (as reported)

Vendor	Product	Versions
TUM-Dev	NavigaTUM	< 86f34c72886a59ec8f1e6c00f78a5ab889a70fd0

Weakness: CWE-23, CWE-26 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N

References

https://github.com/TUM-Dev/NavigaTUM/security/advisories/GHSA-59hj-f48w-hjfm x_refsource_CONFIRM
https://github.com/TUM-Dev/NavigaTUM/pull/2650 x_refsource_MISC
https://github.com/TUM-Dev/NavigaTUM/commit/86f34c72886a59ec8f1e6c00f78a5ab889a70fd0 x_refsource_MISC