CVE-2026-61645：Docat is a tool for hosting versioned static documentation. In the aff

Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vulnerability in the Upload API arises because the API does not validate the uploaded file path or type. An attacker can overwrite sensitive configuration files or place malicious files on the Docat web server. Depending on deployment context, uploaded content can enable remote code execution or cross-site scripting intended to steal cookies or redirect users to malicious websites. Version 1.6.0 mitigates filename-based path traversal; remediation of unrestricted file types or deployment-dependent malicious-content effects is not established by the verified patch.

漏洞详情

Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vulnerability in the Upload API arises because the API does not validate the uploaded file path or type. An attacker can overwrite sensitive configuration files or place malicious files on the Docat web server. Depending on deployment context, uploaded content can enable remote code execution or cross-site scripting intended to steal cookies or redirect users to malicious websites. Version 1.6.0 mitigates filename-based path traversal; remediation of unrestricted file types or deployment-dependent malicious-content effects is not established by the verified patch.

风险评估

• CVSS 评分：9.1（CRITICAL）
• 评分版本：CVSS 3.1
• 攻击向量：CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L

弱点类型

CWE-434

参考链接

• https://github.com/docat-org/docat/commit/85fc40e8348c6328f488395d03c779517a0913fd
• https://github.com/docat-org/docat/releases/tag/1.6.0
• https://github.com/docat-org/docat/security/advisories/GHSA-jcxj-j5qf-8crw

数据来源：NVD（美国国家漏洞数据库），入库时按 CVSS 评分筛选。

原文链接： CVE-2026-61645：Docat is a tool for hosting versioned static documentation. In the aff