CVE-2026-71283

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-71283", "assignerOrgId": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c", "state": "PUBLISHED", "assignerShortName": "TuranSec", "dateReserved": "2026-08-05T12:23:34.968Z", "datePublished": "2026-08-05T12:26:29.146Z", "dateUpdated": "2026-08-10T11:47:08.697Z"}, "containers": {"cna": {"title": "Fledge IoT Gateway Backup Restore Tar Path Traversal", "descriptions": [{"lang": "en", "value": "Fledge's backup-restore upload handler, upload_backup (python/fledge/services/core/api/backup_restore.py), calls tarfile.extractall(temp_path) on an admin-uploaded tar archive with no filter argument and no per-member path validation. Requires the admin role (@has_permission(\"admin\")).", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Fledge's backup-restore upload handler, upload_backup (python/fledge/services/core/api/backup_restore.py), calls tarfile.extractall(temp_path) on an admin-uploaded tar archive with no filter argument and no per-member path validation. Requires the admin role (@has_permission(\"admin\")).</p>"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-22", "cweId": "CWE-22", "type": "CWE"}]}], "affected": [{"vendor": "fledge-iot", "product": "fledge", "programFiles": ["python/fledge/services/core/api/backup_restore.py"], "versions": [{"version": "0", "lessThanOrEqual": "3.1.0", "status": "affected", "versionType": "semver"}], "defaultStatus": "unaffected"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N", "baseScore": 4.9, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "NONE"}}], "references": [{"url": "https://github.com/fledge-iot/fledge", "tags": ["third-party-advisory"]}, {"url": "https://github.com/fledge-iot/fledge/blob/main/python/fledge/services/core/api/backup_restore.py", "tags": ["third-party-advisory"]}], "credits": [{"lang": "en", "value": "Alibek Baxtiyorov", "type": "finder"}], "providerMetadata": {"orgId": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c", "shortName": "TuranSec", "dateUpdated": "2026-08-10T11:47:08.697Z"}, "source": {"discovery": "EXTERNAL"}, "datePublic": "2026-08-05T12:26:29.146Z"}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-05T15:52:56.335077Z", "id": "CVE-2026-71283", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-05T15:53:15.435Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-71283", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-05T15:52:56.335077Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-05T15:52:59.221Z"}}], "cna": {"title": "Fledge IoT Gateway Backup Restore Tar Path Traversal", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Alibek Baxtiyorov"}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "fledge-iot", "product": "fledge", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "3.1.0"}], "programFiles": ["python/fledge/services/core/api/backup_restore.py"], "defaultStatus": "unaffected"}], "datePublic": "2026-08-05T12:26:29.146Z", "references": [{"url": "https://github.com/fledge-iot/fledge", "tags": ["third-party-advisory"]}, {"url": "https://github.com/fledge-iot/fledge/blob/main/python/fledge/services/core/api/backup_restore.py", "tags": ["third-party-advisory"]}], "descriptions": [{"lang": "en", "value": "Fledge's backup-restore upload handler, upload_backup (python/fledge/services/core/api/backup_restore.py), calls tarfile.extractall(temp_path) on an admin-uploaded tar archive with no filter argument and no per-member path validation. Requires the admin role (@has_permission(\"admin\")).", "supportingMedia": [{"type": "text/html", "value": "<p>Fledge's backup-restore upload handler, upload_backup (python/fledge/services/core/api/backup_restore.py), calls tarfile.extractall(temp_path) on an admin-uploaded tar archive with no filter argument and no per-member path validation. Requires the admin role (@has_permission(\"admin\")).</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "CWE-22"}]}], "providerMetadata": {"orgId": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c", "shortName": "TuranSec", "dateUpdated": "2026-08-10T11:47:08.697Z"}}}, "cveMetadata": {"cveId": "CVE-2026-71283", "state": "PUBLISHED", "dateUpdated": "2026-08-10T11:47:08.697Z", "dateReserved": "2026-08-05T12:23:34.968Z", "assignerOrgId": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c", "datePublished": "2026-08-05T12:26:29.146Z", "assignerShortName": "TuranSec"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "fledge", "programFiles": ["python/fledge/services/core/api/backup_restore.py"], "vendor": "fledge-iot", "versions": [{"lessThanOrEqual": "3.1.0", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Fledge's backup-restore upload handler, upload_backup (python/fledge/services/core/api/backup_restore.py), calls tarfile.extractall(temp_path) on an admin-uploaded tar archive with no filter argument and no per-member path validation. Requires the admin role (@has_permission(\"admin\"))."}, {"lang": "es", "value": "El gestor de carga de copia de seguridad y restauraci\u00f3n de Fledge, upload_backup() (python/fledge/services/core/api/backup_restore.py), llama a tarfile.extractall(temp_path) en un archivo tar subido por un administrador sin argumento de filtro y sin validaci\u00f3n de ruta por miembro. Un archivo tar manipulado que contiene nombres de miembros con componentes de ruta \u2019.. / \u2019 extrae archivos fuera del directorio temporal previsto, permitiendo escrituras de archivos arbitrarias en cualquier lugar del sistema de archivos accesible por el proceso de Fledge. Requiere el rol de administrador (@has_permission(\u2019admin\u2019))."}], "id": "CVE-2026-71283", "lastModified": "2026-10-23T21:10:00.157", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 3.6, "source": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-71283", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-05T15:52:56.335077Z", "version": "2.0.3"}}]}, "published": "2026-08-05T13:24:52.970", "references": [{"source": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c", "url": "https://github.com/fledge-iot/fledge"}, {"source": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c", "url": "https://github.com/fledge-iot/fledge/blob/main/python/fledge/services/core/api/backup_restore.py"}], "sourceIdentifier": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,3.1.0]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "fledge", "source": "cna", "vendor": "fledge-iot"}, "product": "fledge", "vendor": "fledge-iot"}], "created": "2026-08-05T15:45:16.664953+00:00", "updated": "2026-08-10T21:00:04.273820+00:00", "vendors": ["fledge-iot", "fledge-iot$PRODUCT$fledge"]}