What’s Vulnerable › Vulnerabilities

CVE-2026-49133: Typemill < 2.24.0 Path Traversal via ControllerApiImage::getPagemedia()

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-06-17 · updated 2026-07-14
• Weakness: CWE-22

Description

Typemill before 2.24.0 contains a path traversal vulnerability that allows authenticated attackers with Author-level privileges to read arbitrary files outside the content directory by supplying traversal sequences in the path query parameter passed to Storage::getFile() with an empty folder argument. Attackers can bypass traversal-prevention controls in Storage::getFolderPath() to access sensitive files.

Affected products

• typemill: before 2.24.0 — fixed in 2.24.0

How to fix

Upgrade to a fixed version: typemill 2.24.0. Check the vendor advisory for mitigations.

References

• https://github.com/typemill/typemill/commit/bfbb27001acd5c56ad62166dbefe6a59798cf1c0
• https://github.com/typemill/typemill/releases/tag/v2.24.2
• https://www.vulncheck.com/advisories/typemill-path-traversal-via-controllerapiimage-getpagemedia

Get alerted when CVE-2026-49133 or the next vulnerability affects your stack