CVE-2026-85684

9.1 Critique

Publiée le 04/09/2026 à 17:17 · Modifiée le 23/09/2026 à 19:17 · Analyse NVD reportée · Source : disclosure@vulncheck.com

Description

marker through 2.0.0 contains a path traversal vulnerability in the FastAPI /marker/upload handler that fails to sanitize the file.filename parameter. Unauthenticated attackers can supply filenames containing directory traversal sequences to write arbitrary files to any location or delete existing files on the system.

Traduire en français

Produits concernés

datalab-to marker

Scores CVSS

Version	Score	Source	Vecteur
4.0	8.8 Élevée	disclosure@vulncheck.com	`CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X`
3.1	9.1 Critique	disclosure@vulncheck.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H`

Faiblesses (CWE)

CWE-73

Références

https://github.com/datalab-to/marker
https://github.com/datalab-to/marker/blob/v2.0.0/marker/scripts/server.py
https://github.com/datalab-to/marker/issues/1047
https://www.vulncheck.com/advisories/marker-through-2.0.0-path-traversal-via-upload-filename
https://github.com/datalab-to/marker/issues/1047

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories