CVE-2026-49009

Description

Northern.tech Mender Server v4.1.0, v4.0.1 and below, and fixed in v4.1.1 and v4.0.2 allows Directory Traversal.

PUBLISHED Reserved 2026-05-27 | Published 2026-05-27 | Updated 2026-05-28 | Assigner mitre

References

northern.tech

mender.io/...tion-and-access-control-issues-in-mender-server

cve.org (CVE-2026-49009)

nvd.nist.gov (CVE-2026-49009)

Download JSON