---
id: CVE-2026-116117
title: halo-dev halo View Name Resolver DefaultViewNameResolver.java path traversal
summary: >-
  A flaw has been found in halo-dev halo up to 2.27.0-beta.1. Affected by this
  vulnerability is the function
  run.halo.app.theme.DefaultViewNameResolver.resolveViewNameOrDefault of the
  file application/src/main/java/run/halo/app/theme/Defau…
severity: high
cvss: 7.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C'
cvssSource: cna
cwe:
  - CWE-22
vendor: halo-dev
product: halo
affected:
  - halo 2.27.0-beta.0
  - halo 2.27.0-beta.1
published: '2026-10-26'
updated: '2026-10-26'
sourceUpdated: '2026-10-26T04:15:13.200Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-116117'
references:
  - url: 'https://vuldb.com/vuln/426185'
    label: >-
      VDB-426185 | halo-dev halo View Name Resolver DefaultViewNameResolver.java
      path traversal
  - url: 'https://vuldb.com/vuln/426185/cti'
    label: 'VDB-426185 | CTI Indicators (IOB, IOC, TTP, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2026-116117'
    label: CVE-2026-116117 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/1004845'
    label: 'Submit #1004845 | halo-sigs Halo ≤ 2.27.0-beta.1 Arbitrary File Read'
tags:
  - cve.org
ingestedAt: '2026-10-26T05:18:14.110Z'
---

## Overview

A flaw has been found in halo-dev halo up to 2.27.0-beta.1. Affected by this vulnerability is the function run.halo.app.theme.DefaultViewNameResolver.resolveViewNameOrDefault of the file application/src/main/java/run/halo/app/theme/DefaultViewNameResolver.java of the component View Name Resolver. Executing a manipulation of the argument template can lead to path traversal. The attack may be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

## Affected

- `halo 2.27.0-beta.0`
- `halo 2.27.0-beta.1`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.