{"id":"CVE-2026-6815","aliases":["GHSA-rmxx-v9rj-vpvg"],"title":"Casdoor: Arbitrary file write possible through Local File System storage provider","summary":"Casdoor: Arbitrary file write possible through Local File System storage provider","severity":"medium","cvss":5.9,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","vendor":"casdoor","product":"github.com/casdoor/casdoor","ecosystem":"go","affected":["github.com/casdoor/casdoor <= 1.1000.0"],"published":"2026-05-11","updated":"2026-07-08","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-rmxx-v9rj-vpvg","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6815"},{"url":"https://github.com/casdoor/casdoor"},{"url":"https://kb.cert.org/vuls/id/937808"},{"url":"https://www.kb.cert.org/vuls/id/937808"}],"tags":["osv","go","exploit-available"],"epss":0.00513,"epssPercentile":0.42706,"exploitAvailable":true,"ingestedAt":"2026-07-09T18:56:36.905Z","exploits":{"exploitdb":true,"github":1,"githubRepos":["https://github.com/danilo-dellorco/CVE-2026-6815"],"checkedAt":"2026-09-23T07:14:37.365Z"},"slug":"CVE-2026-6815","body":"## Overview\n\nAn arbitrary file write vulnerability exists in Casdoor's Local File System storage provider. Due to insufficient path sanitization, an authenticated attacker with administrative privileges can perform a Path Traversal attack to create or overwrite arbitrary files anywhere on the host filesystem, bypassing the application's intended storage sandbox.\n\n## Affected packages\n\n- `github.com/casdoor/casdoor <= 1.1000.0`\n\n## Remediation\n\nRefer to the advisory for the patched release.","depth":"twilight","depthScore":45,"depthScoreParts":{"impact":32.5,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[]}