CVE-2026-55469— Snipe-IT: Path traversal vulnerability via CSV import `image` field
Quick assessment
Affected
grokability snipe-it
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Grokability Snipe-IT是Grokability公司开源的一套开源IT资产/许可证管理系统。 Grokability Snipe-IT 8.6.2之前版本存在路径遍历漏洞，该漏洞源于路径遍历，可能导致认证用户利用CSV导入功能在资产图像字段中插入路径遍历字符串，随后触发图像删除，从而删除服务器进程可访问的任意文件。
Possible ATT&CK Techniques 2 AI
T1068 · Exploitation for Privilege Escalation T1083 · File and Directory DiscoveryAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| grokability | snipe-it | < 8.6.2 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-55469
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Snipe-IT: Path traversal vulnerability via CSV import `image` field
Source: CVE Program / CVE List V5
Vulnerability Description
Snipe-IT is an IT asset/license management system. Prior to 8.6.2, an authenticated user with import and assets.update permissions can place a path traversal string in an asset image field through CSV import and then trigger image deletion, allowing deletion of arbitrary files accessible to the server process. This issue is fixed in version 8.6.2.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5
Vulnerability Title
Grokability Snipe-IT 路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Grokability Snipe-IT是Grokability公司开源的一套开源IT资产/许可证管理系统。 Grokability Snipe-IT 8.6.2之前版本存在路径遍历漏洞，该漏洞源于路径遍历，可能导致认证用户利用CSV导入功能在资产图像字段中插入路径遍历字符串，随后触发图像删除，从而删除服务器进程可访问的任意文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| grokability | snipe-it | < 8.6.2 | - |
|
II. Public POCs for CVE-2026-55469
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-55469
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-55469 (1)
Vendor Advisories for CVE-2026-55469 (1)
Vendor Pages for CVE-2026-55469 (1)
-
🔗 Release v8.6.2 · grokability/snipe-it · GitHub x_refsource_MISC
Same Patch Batch · grokability · 2026-07-10 · 18 CVEs total
| CVE-2026-54329 | 8.5 HIGH | Snipe-IT: Cross-Tenant Accessory Injection in Snipe-IT API |
| CVE-2026-55516 | 7.7 HIGH | Snipe-IT: Cross-company asset maintenance re-parenting via API update |
| CVE-2026-55460 | 7.1 HIGH | Snipe-IT: Authorization bypass on bulk editing users |
| CVE-2026-55461 | 6.1 MEDIUM | Snipe-IT: Open Redirect After User Edit |
| CVE-2026-55475 | 5.7 MEDIUM | Snipe-IT: Import created_by can be overwritten |
| CVE-2026-55515 | 5.0 MEDIUM | Snipe-IT: Cross-company deletion of pending checkout acceptances via unscoped report endpo |
| CVE-2026-55472 | 4.3 MEDIUM | Snipe-IT: API Location Creation Bypasses FMCS Parent-Child Company Boundary Validation |
| CVE-2026-55462 | 4.3 MEDIUM | Snipe-IT: Authorization bypass on print inventory page |
| CVE-2026-55464 | Snipe-IT: Stored XSS via Markdown custom field | |
| CVE-2026-55478 | Snipe-IT: Missing object-level authorization in Kits API | |
| CVE-2026-55474 | Snipe-IT: Directory traversal in displaySig | |
| CVE-2026-55452 | Snipe-IT: CSV formula injection in Activity Report export | |
| CVE-2026-55479 | Snipe-IT: Incorrect permission for legacy license checkin API | |
| CVE-2026-55843 | Snipe-IT: Improper Privilege Management | |
| CVE-2026-55466 | Snipe-IT: Stored XSS via inline-served attachment | |
| CVE-2026-55481 | Snipe-IT: CSS Injection via `header_color` Setting | |
| CVE-2026-55476 | Snipe-IT: Unauthorized Asset Request Cancellation via Unguarded cancel_by_admin Parameter |
IV. Related Vulnerabilities
Same product: snipe-it
-
CVE-2026-114064
Snipe-IT before 8.7.0 SSRF Port Scanning via Webhook Testing -
CVE-2026-62368
Snipe-IT: Stored XSS via Custom Field name in asset-list col -
CVE-2026-63493
Snipe-IT: 2FA bypass via the API token flow -
CVE-2026-63498
Snipe-IT: Stored XSS via Inline XML Rendering in the Uploade -
CVE-2026-88894
Snipe-IT before 8.7.2 Authorization Bypass via Predefined Ki
Same vendor: grokability
-
CVE-2026-114064
Snipe-IT before 8.7.0 SSRF Port Scanning via Webhook Testing -
CVE-2026-62368
Snipe-IT: Stored XSS via Custom Field name in asset-list col -
CVE-2026-63493
Snipe-IT: 2FA bypass via the API token flow -
CVE-2026-63498
Snipe-IT: Stored XSS via Inline XML Rendering in the Uploade -
CVE-2026-88894
Snipe-IT before 8.7.2 Authorization Bypass via Predefined Ki
Same weakness: CWE-22
-
CVE-2026-114402
Trudesk through 1.2.11 Path Traversal and Authorization Bypa -
CVE-2026-114399
Trudesk through 1.2.11 Path Traversal via Backup Delete and -
CVE-2026-114040
DT42 BerryNet Model Package Metadata dlmodelmgr.py DLModelMa -
CVE-2026-113743
Tenstorrent tt-metal load_checkpoints.py load_hf_state_dict_ -
CVE-2026-114109
uv before 0.11.15 Arbitrary File Write via Entry Point Names
V. Comments for CVE-2026-55469
No comments yet