Vulnerability · Published Sep 4, 2026 · Assigned by VulnCheck

CVE-2026-85688TEN Framework 0.11.71 Unauthenticated File Read/Write via TMAN Designer

Critical 9.8

In plain English

A critical-severity missing authentication in ten-framework from TEN-framework. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.6% (higher than 86% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)2.6%top 14.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack tooling1Nuclei

Official description

TEN Framework 0.11.71 contains unauthenticated arbitrary file read and write vulnerabilities in the TMAN Designer file-content API endpoints. Attackers can submit POST and PUT requests to the /api/designer/v1/file-content endpoints to read arbitrary files or write malicious content to system paths, enabling code execution through authorized_keys, cron files, or executable graph files.

Affected products (as reported)

Vendor	Product	Versions
TEN-framework	ten-framework	0 – through 0.11.71

Weakness: CWE-306 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

GitHub Issue #2187 issue-tracking
https://github.com/TEN-framework/ten-framework product
https://github.com/TEN-framework/ten-framework/blob/0.11.71/core/src/ten_manager/src/designer/file_content/mod.rs technical-description
VulnCheck Advisory: TEN Framework 0.11.71 Unauthenticated File Read/Write via TMAN Designer third-party-advisory