CVE-2026-30958

HIGHNuclei

OneUptime: Path Traversal — Arbitrary File Read (No Auth)

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2026-30958 has a selected CVSS score of 7.2 (high); EIP currently links 1 Nuclei template.

Description

OneUptime is a solution for monitoring and managing online services. Prior to 10.0.21, an unauthenticated path traversal in the /workflow/docs/:componentName endpoint allows reading arbitrary files from the server filesystem. The componentName route parameter is concatenated directly into a file path passed to res.sendFile() in orker/FeatureSet/Workflow/Index.ts with no sanitization or authentication middleware. This vulnerability is fixed in 10.0.21.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 10, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

oneuptime

Browse OneUptime / oneuptime
CVE List< 10.0.21affected

Nuclei templates

1
ProjectDiscoveryHIGHOneUptime < 10.0.21 - Path TraversalCVSS 7.2

OneUptime < 10.0.21 contains a path traversal caused by unsanitized componentName parameter in /workflow/docs/:componentName endpoint, letting unauthenticated attackers read arbitrary files from the server filesystem.

Impact

Unauthenticated attackers can read arbitrary files on the server, potentially exposing sensitive information.

Remediation

Upgrade to version 10.0.21 or later.

WeaknessesCWE-22
Authorsashvinctrl, iconnnjka
Template tagscvecve2026oneuptimelfipath-traversalvulnunauth
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
FOFA: title="OneUptime"
https://github.com/OneUptime/oneuptime/security/advisories/GHSA-p2wh-9pw8-hvff https://nvd.nist.gov/vuln/detail/CVE-2026-30958 https://github.com/OneUptime/oneuptime

Source: ProjectDiscovery

References

2