Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-117373

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Janus WebRTC Server 1.2.3 至 1.4.0 版本存在目录遍历漏洞。当创建按需（ondemand）流时，该应用会接受由调用方提供的媒体路径。系统仅通过检查该路径是否包含某种音频扩展名来进行验证，随后将其传递给文件源以打开该文件。由于未执行路径规范化（canonicalization），也未实施目录白名单限制，未认证的调用方即可诱导服务器打开任意本地文件，并将其作为媒体源使用，最终将文件内容以 RTP 音频形式传输给观看者。

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-117373

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Janus WebRTC Server 1.2.3 through 1.4.0 is vulnerable to Directory Traversal. The application accepts a caller supplied media path when an ondemand stream is created. The path is validated only by checking whether it contains one of the audio extensions and is then passed to the file source which opens it. No canonicalization is performed and no directory allowlist is enforced, so an unauthenticated caller can make the server open an arbitrary local file and use it as a media source, with the content delivered to viewers as RTP audio.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2026-117373

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-117373

请登录查看更多情报信息。

Other References for CVE-2026-117373 (4)

Same Patch Batch · n/a · 2026-11-11 · 4 CVEs total

CVE-2026-111190 8.1 HIGH ARForms <= 7.2.4 - Unauthenticated Arbitrary File Upload to Remote Code Execution via X-FI
CVE-2026-12427 7.2 HIGH ARforms <= 7.2.4 - Unauthenticated Stored Cross-Site Scripting via 'description' Parameter
CVE-2026-12424 7.2 HIGH ARforms <= 7.2.4 - Unauthenticated Stored Cross-Site Scripting via Referer Header

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a