{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-63663","assignerOrgId":"a0819718-46f1-4df5-94e2-005712e83aaa","state":"PUBLISHED","assignerShortName":"GitHub_M","dateReserved":"2026-07-17T14:47:08.031Z","datePublished":"2026-11-06T20:07:41.007Z","dateUpdated":"2026-11-06T20:07:41.007Z"},"containers":{"cna":{"title":"CloudBeaver: Path Traversal in updateResultsDataBatch Allows Unauthorized Server File Stream Access","problemTypes":[{"descriptions":[{"cweId":"CWE-22","lang":"en","description":"CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","type":"CWE"}]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"}}],"references":[{"name":"https://github.com/dbeaver/cloudbeaver/security/advisories/GHSA-8wr4-mh28-m992","tags":["x_refsource_CONFIRM"],"url":"https://github.com/dbeaver/cloudbeaver/security/advisories/GHSA-8wr4-mh28-m992"},{"name":"https://github.com/dbeaver/cloudbeaver/pull/4411","tags":["x_refsource_MISC"],"url":"https://github.com/dbeaver/cloudbeaver/pull/4411"},{"name":"https://github.com/dbeaver/cloudbeaver/commit/caef729a8d227b0446eab6f0ae5f1dc20dced9b5","tags":["x_refsource_MISC"],"url":"https://github.com/dbeaver/cloudbeaver/commit/caef729a8d227b0446eab6f0ae5f1dc20dced9b5"}],"affected":[{"vendor":"dbeaver","product":"cloudbeaver","versions":[{"version":">= 23.2.3, < 26.1.2","status":"affected"}]}],"providerMetadata":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-11-06T20:07:41.007Z"},"descriptions":[{"lang":"en","value":"CloudBeaver is a cloud database manager. From version 23.2.3 until 26.1.2, a path traversal vulnerability in its SQL result-editing functionality allows an authenticated user with SQL result-editing privileges to cause the server to open files outside the intended temporary upload directory. In affected database value-handling scenarios, this can disclose local files readable by the CloudBeaver server process. Version 26.1.2 prevents traversal outside the intended temporary upload directory."}],"source":{"advisory":"GHSA-8wr4-mh28-m992","discovery":"UNKNOWN"}}}}