CVE-2026-25575 NavigaTUM has a Path Traversal Vulnerability in the propose_edits functionality
Unauthenticated attackers can overwrite files or fill storage via path traversal in the propose_edits endpoint of NavigaTUM.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-25575?
CVE-2026-25575 is a high-severity path traversal vulnerability in TUM-Dev NavigaTUM, published on 4 Feb 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
NavigaTUM is a website and API to search for rooms, buildings and other places. Prior to commit 86f34c7, there is a path traversal vulnerability in the propose_edits endpoint allows unauthenticated users to overwrite files in directories writable by the application user (e.g., /cdn). By supplying unsanitized file keys containing traversal sequences (e.g., ../../) in the JSON payload, an attacker can escape the intended temporary directory and replace public facing images or fill the server's storage. This issue has been patched via commit 86f34c7.
Which versions are affected by CVE-2026-25575?
It affects 1 product.
Products include Tum Navigatum.
How do I fix CVE-2026-25575?
No fix has been published for CVE-2026-25575 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2026-25575 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-25575 exists.
Sources
Also known as GHSA-59hj-f48w-hjfm.