Sanster vulnerabilities

Products

• IOPaint 1

Latest Sanster CVEs

Newest publication first

1. CVE-2026-5258 Sanster IOPaint File Manager file_manager.py _get_file path traversal

   Published 2026-04-01

   Medium·CVSS 6.9 EPSS 0.64%

   A vulnerability was found in Sanster IOPaint 1.5.3. Impacted is the function _get_file of the file iopaint/file_manager/file_manager.py of the component File Manager. Performing a manipulation of the argument filename results in path traversal. The attack is possible to be carrie...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.