Vulnerability · Published Sep 15, 2026 · Assigned by VulnCheck
CVE-2026-91751Flextype CMS through 1.0.0-alpha.3 Path Traversal via Entries REST API
High 8.3
In plain English
A high-severity path traversal in flextype from flextype. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 46% of all known vulnerabilities).
Severity (CVSS 3.1)8.3High
Exploit odds (30 days)0.5%top 54.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Flextype CMS through 1.0.0-alpha.3 fails to properly validate id and new_id parameters in the Entries REST API, allowing API token holders to read, create, or overwrite files outside the entries directory. Attackers can use traversal sequences in API requests to escape the project entries directory and manipulate arbitrary files and directories on the filesystem.
Affected products (as reported)
Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
References
- GitHub Issue #596 issue-tracking
- https://github.com/flextype/flextype product
- https://github.com/flextype/flextype/blob/v1.0.0-alpha.3/src/flextype/core/Entries/Entries.php#L856-L906 technical-description
- VulnCheck Advisory: Flextype CMS through 1.0.0-alpha.3 Path Traversal via Entries REST API third-party-advisory