CVE-2026-27897

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-27897", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-02-24T15:19:29.717Z", "datePublished": "2026-03-11T15:30:19.670Z", "dateUpdated": "2026-03-11T17:27:29.687Z"}, "containers": {"cna": {"title": "Vociferous Unauthenticated Remote Path Traversal (RCE via CSRF)", "problemTypes": [{"descriptions": [{"cweId": "CWE-22", "lang": "en", "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-306", "lang": "en", "description": "CWE-306: Missing Authentication for Critical Function", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 10, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/WanderingAstronomer/Vociferous/security/advisories/GHSA-7cpr-frgj-h85v", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/WanderingAstronomer/Vociferous/security/advisories/GHSA-7cpr-frgj-h85v"}], "affected": [{"vendor": "WanderingAstronomer", "product": "Vociferous", "versions": [{"version": "< 4.4.2", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-03-11T15:30:19.670Z"}, "descriptions": [{"lang": "en", "value": "Vociferous provides cross-platform, offline speech-to-text with local AI refinement. Prior to 4.4.2, the vulnerability exists in src/api/system.py within the export_file route. The application accepts a JSON payload containing a filename and content. While the developer intended for a native UI dialog to handle the file path, the API does not validate the filename string before it is processed by the backends filesystem logic. Because the API is unauthenticated and the CORS configuration in app.py is overly permissive (allow_origins=[\"*\"] or allowing localhost), an external attacker can bypass the UI entirely. By using directory traversal sequences (../), an attacker can force the app to write arbitrary data to any location accessible by the current user's permissions. This vulnerability is fixed in 4.4.2."}], "source": {"advisory": "GHSA-7cpr-frgj-h85v", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-11T17:27:03.315605Z", "id": "CVE-2026-27897", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-11T17:27:29.687Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-27897", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-03-11T17:27:03.315605Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-11T17:27:08.913Z"}}], "cna": {"title": "Vociferous Unauthenticated Remote Path Traversal (RCE via CSRF)", "source": {"advisory": "GHSA-7cpr-frgj-h85v", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 10, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "WanderingAstronomer", "product": "Vociferous", "versions": [{"status": "affected", "version": "< 4.4.2"}]}], "references": [{"url": "https://github.com/WanderingAstronomer/Vociferous/security/advisories/GHSA-7cpr-frgj-h85v", "name": "https://github.com/WanderingAstronomer/Vociferous/security/advisories/GHSA-7cpr-frgj-h85v", "tags": ["x_refsource_CONFIRM"]}], "descriptions": [{"lang": "en", "value": "Vociferous provides cross-platform, offline speech-to-text with local AI refinement. Prior to 4.4.2, the vulnerability exists in src/api/system.py within the export_file route. The application accepts a JSON payload containing a filename and content. While the developer intended for a native UI dialog to handle the file path, the API does not validate the filename string before it is processed by the backends filesystem logic. Because the API is unauthenticated and the CORS configuration in app.py is overly permissive (allow_origins=[\"*\"] or allowing localhost), an external attacker can bypass the UI entirely. By using directory traversal sequences (../), an attacker can force the app to write arbitrary data to any location accessible by the current user's permissions. This vulnerability is fixed in 4.4.2."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-306", "description": "CWE-306: Missing Authentication for Critical Function"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-03-11T15:30:19.670Z"}}}, "cveMetadata": {"cveId": "CVE-2026-27897", "state": "PUBLISHED", "dateUpdated": "2026-03-11T17:27:29.687Z", "dateReserved": "2026-02-24T15:19:29.717Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-03-11T15:30:19.670Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "Vociferous", "vendor": "WanderingAstronomer", "versions": [{"status": "affected", "version": "< 4.4.2"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:wanderingastronomer:vociferous:*:*:*:*:*:*:*:*", "matchCriteriaId": "DF35DC01-126A-4945-A4F9-462D79BC1FD4", "versionEndExcluding": "4.4.2", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Vociferous provides cross-platform, offline speech-to-text with local AI refinement. Prior to 4.4.2, the vulnerability exists in src/api/system.py within the export_file route. The application accepts a JSON payload containing a filename and content. While the developer intended for a native UI dialog to handle the file path, the API does not validate the filename string before it is processed by the backends filesystem logic. Because the API is unauthenticated and the CORS configuration in app.py is overly permissive (allow_origins=[\"*\"] or allowing localhost), an external attacker can bypass the UI entirely. By using directory traversal sequences (../), an attacker can force the app to write arbitrary data to any location accessible by the current user's permissions. This vulnerability is fixed in 4.4.2."}, {"lang": "es", "value": "Vociferous proporciona conversi\u00f3n de voz a texto multiplataforma y sin conexi\u00f3n con refinamiento de IA local. Antes de la versi\u00f3n 4.4.2, la vulnerabilidad existe en src/api/system.py dentro de la ruta export_file. La aplicaci\u00f3n acepta una carga \u00fatil JSON que contiene un nombre de archivo y contenido. Si bien el desarrollador pretend\u00eda que un di\u00e1logo de interfaz de usuario nativo manejara la ruta del archivo, la API no valida la cadena del nombre de archivo antes de que sea procesada por la l\u00f3gica del sistema de archivos del backend. Debido a que la API no est\u00e1 autenticada y la configuraci\u00f3n CORS en app.py es excesivamente permisiva (allow_origins=['*'] o permitiendo localhost), un atacante externo puede omitir la interfaz de usuario por completo. Al usar secuencias de salto de directorio (../), un atacante puede forzar a la aplicaci\u00f3n a escribir datos arbitrarios en cualquier ubicaci\u00f3n accesible por los permisos del usuario actual. Esta vulnerabilidad se corrige en la versi\u00f3n 4.4.2."}], "id": "CVE-2026-27897", "lastModified": "2026-06-17T10:27:50.510", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 10.0, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 6.0, "source": "security-advisories@github.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.2, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-27897", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-03-11T17:27:03.315605Z", "version": "2.0.3"}}]}, "published": "2026-03-11T16:16:40.133", "references": [{"source": "security-advisories@github.com", "tags": ["Exploit", "Vendor Advisory"], "url": "https://github.com/WanderingAstronomer/Vociferous/security/advisories/GHSA-7cpr-frgj-h85v"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}, {"lang": "en", "value": "CWE-306"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,4.4.2)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Vociferous", "source": "cna", "vendor": "WanderingAstronomer"}, "product": "vociferous", "vendor": "wanderingastronomer"}], "analysis": {"en": {"generated_at": "2026-03-20T15:56:16.225204+00:00", "value": {"mitigation_remediation": ["Upgrade Vociferous to version 4.4.2 or later.", "Restrict the CORS policy to trusted origins only.", "Implement authentication for the export_file endpoint to prevent unauthenticated use.", "Monitor application logs for abnormal file write attempts and directory traversal strings."], "summary": {"action": "Immediate Patch", "impact": "Remote Code Execution"}, "threat_synthesis": {"affected_systems": "The affected product is Vociferous developed by WanderingAstronomer. All releases prior to 4.4.2 contain the flaw. No other vendors or product versions are indicated in the advisory. This is a cross\u2011platform offline speech\u2011to\u2011text application with local AI refinement.", "description_and_impact": "The vulnerability exists in the export_file route of Vociferous versions earlier than 4.4.2. The API accepts a JSON payload that contains a filename and content, but the filename is not validated by the backend. This omission allows directory traversal sequences such as \"../\", which enable an attacker to instruct the application to write arbitrary data to any directory that is writable by the process user. The API is unauthenticated and the CORS policy is permissive, allowing cross\u2011origin requests from any domain; thus the likely attack vector is an unauthenticated HTTP request that originates from a foreign origin, inferred from the permissive CORS setting. If an attacker supplies a file that contains executable code or modifies a configuration file, the application will run that code with the privileges of the process, giving the attacker remote code execution capabilities. The weakness involves missing input validation (CWE\u201122) and absent authentication controls (CWE\u2011306).", "risk_and_exploitability": "The vulnerability has a CVSS score of 10, indicating critical severity, yet the EPSS score is less than 1%, suggesting a low probability of exploitation at present. It is not listed in CISA\u2019s KEV catalog. Exploitation requires supplying a crafted JSON payload to the unauthenticated /export_file endpoint and using directory traversal to write malicious files. Because the shared CORS policy accepts any origin, an attacker can bypass the native user interface and submit these requests without authentication, inferred from the available configuration. If a malicious executable is written, remote code execution can occur with the application\u2019s privileges."}}}}, "created": "2026-03-12T10:05:42.864958+00:00", "updated": "2026-03-23T09:55:31.076064+00:00", "vendors": ["wanderingastronomer", "wanderingastronomer$PRODUCT$vociferous"]}