coderaiser/cloudcmd vulnerabilities

Latest coderaiser/cloudcmd CVEs

Newest publication first

1. CVE-2026-110690 Cloud Commander 19.20.2 through 19.21.1 Path Traversal via GET /api/v1/pack

   Published 2026-10-14

   High·CVSS 8.7

   Cloud Commander (cloudcmd) versions 19.20.2 through 19.21.1 contains a path traversal vulnerability in the GET /api/v1/pack endpoint where the onGET handler at server/rest/index.js:130 calls the unguarded root() function instead of the root.resolve() validation wrapper used elsew...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.