CVE-2026-23482— Blinko: Unauthorized Arbitrary File Read - /api/file/temp
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-23482
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Blinko: Unauthorized Arbitrary File Read - /api/file/temp
Source: NVD (National Vulnerability Database)
Vulnerability Description
Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the file server endpoint does not perform permission checks on the temp/ path and does not filter path traversal sequences, allowing unauthorized attackers to read arbitrary files on the server. When scheduled backup tasks are enabled, attackers can read backup files to obtain all user notes and user TOKENS. This issue has been patched in version 1.8.4.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Blinko 路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Blinko是Blinko开源的一款基于人工智能的卡片式笔记应用，专为想要快速捕捉和整理转瞬即逝的灵感的用户而设计。 Blinko 1.8.4之前版本存在路径遍历漏洞，该漏洞源于文件服务器端点未对temp/路径执行权限检查且未过滤路径遍历序列，可能导致未经授权的攻击者读取服务器上的任意文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| blinkospace | blinko | < 1.8.4 | - |
II. Public POCs for CVE-2026-23482
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Blinko < 1.8.4 contains a path traversal vulnerability caused by lack of permission checks and filtering on the temp/ path in the file server endpoint, letting unauthorized attackers read arbitrary files including backup files with user notes and tokens, exploit requires no special privileges. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-23482.yaml | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-23482
请登录查看更多情报信息。
- Release Blinko 1.8.4 · blinkospace/blinko · GitHubx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2026-23482
Same Patch Batch · blinkospace · 2026-03-23 · 10 CVEs total
| CVE-2026-23481 | Blinko: Authenticated Arbitrary File Write - saveAdditionalDevFile | |
| CVE-2026-23484 | Blinko: Authenticated Arbitrary File Write - saveDevPlugin | |
| CVE-2026-23480 | Blinko: Low Privilege User Privilege Escalation - upsertUser Endpoint | |
| CVE-2026-23483 | Blinko: Unauthorized Arbitrary File Read - /plugins | |
| CVE-2026-23488 | Blinko: multiple interfaces in the comment feature allow unauthorized access | |
| CVE-2026-23486 | Blinko: Unauthorized User Information Leak | |
| CVE-2026-23485 | Blinko: Unauthorized Path Traversal File Enumeration - music-metadata | |
| CVE-2026-23487 | Blinko: IDOR - user.detail Endpoint Leaks Superadmin Token | |
| CVE-2026-23882 | Blinko: Admin RCE - MCP Server Command Injection |
IV. Related Vulnerabilities
Same product: blinko
- CVE-2026-23882
Blinko: Admin RCE - MCP Server Command Injection - CVE-2026-23485
Blinko: Unauthorized Path Traversal File Enumeration - music - CVE-2026-23488
Blinko: multiple interfaces in the comment feature allow una - CVE-2026-23487
Blinko: IDOR - user.detail Endpoint Leaks Superadmin Token - CVE-2026-23486
Blinko: Unauthorized User Information Leak
Same vendor: blinkospace
- CVE-2026-23882
Blinko: Admin RCE - MCP Server Command Injection - CVE-2026-23485
Blinko: Unauthorized Path Traversal File Enumeration - music - CVE-2026-23488
Blinko: multiple interfaces in the comment feature allow una - CVE-2026-23487
Blinko: IDOR - user.detail Endpoint Leaks Superadmin Token - CVE-2026-23486
Blinko: Unauthorized User Information Leak
Same weakness: CWE-22
- CVE-2026-8274
npitre cramfs-tools Directory cramfsck.c do_directory path t - CVE-2022-50956
WordPress Plugin amministrazione-aperta 3.7.3 Local File Rea - CVE-2026-8215
Industrial Application Software IAS Canias ERP RMI iasReques - CVE-2026-42605
AzuraCast: Path Traversal in `currentDirectory` Parameter En - CVE-2026-42574
apko dirFS has a symlink-following path traversal that allow
V. Comments for CVE-2026-23482
No comments yet