CVE-2026-6568

CVE-2026-6568 is a path traversal vulnerability affecting KodCloud's KodExplorer file manager up to version 4.52, specifically within the Public Share Handler component's initShareOld function in share.class.php. The flaw allows remote attackers to manipulate the path argument to traverse the file system and access unauthorized files or directories. The vulnerability carries a CVSS score of 7.3 (HIGH) with a network-based attack vector requiring no authentication, low complexity, and no user interaction. The impact is moderate, potentially compromising confidentiality, integrity, and availability of affected systems. The FAUCET Risk Score of 47.0 indicates elevated concern, though the EPSS score of 0.0009 suggests currently low exploitation likelihood compared to other vulnerabilities. Exploitation status indicates active interest despite low current exploitation rates. The vulnerability has been publicly disclosed with exploit code available, placing organizations running affected KodExplorer versions at risk. The vendor's lack of response to early disclosure notification compounds the risk, as no official patches are currently available to remediate the issue.