What is CVE-2026-19054?
CVE-2026-19054 is a vulnerability in the Lspace-io lspace-server, affecting the Repositories File API component within the `src/core/repository.ts` file via manipulation of the "filePa" argument in functions like `fileExists`, `readFile`, `writeFile`, and `deleteFile`. This could allow remote attackers to perform unauthorized file operations. Users should update to the latest patched version immediately.
Azərbaycanca: CVE-2026-19054 Lspace-io lspace-server proqramında Repositories File API komponentində `src/core/repository.ts` faylındakı `fileExists`, `readFile`, `writeFile` və `deleteFile` funksiyalarında "filePa" arqumentinin manipulyasiyası ilə bağlı təhlükəsizlik zəifliyi aşkarlanıb. Bu, uzaqdan kod icrası və ya fayl manipulyasiyası kimi risklərə səbəb ola bilər. İstifadəçilərə dərhal proqramı ən son versiyaya yeniləmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-22
FAQ2
Which component of Lspace-io lspace-server is affected by CVE-2026-19054?
CVE-2026-19054 affects the Repositories File API component of Lspace-io lspace-server, specifically the `fileExists`, `readFile`, `writeFile`, and `deleteFile` functions in the `src/core/repository.ts` file.
What action is recommended to mitigate CVE-2026-19054?
Users should immediately update Lspace-io lspace-server to the latest patched version.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.