CVE-2026-12568

{
  "id": "CVE-2026-12568",
  "sourceIdentifier": "[email protected]",
  "published": "2026-06-17T23:17:03.340",
  "lastModified": "2026-10-26T11:10:00.157",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The postman_download module uses the workspace name field from the Postman API to construct the local directory path without sanitization. If a malicious workspace has a name containing path traversal characters, pathlib resolves the path outside the intended output directory, allowing an attacker to write arbitrary files to the user's system."
    },
    {
      "lang": "es",
      "value": "El módulo postman_download utiliza el campo de nombre del espacio de trabajo de la API de Postman para construir la ruta del directorio local sin saneamiento. Si un espacio de trabajo malicioso tiene un nombre que contiene caracteres de salto de ruta, pathlib resuelve la ruta fuera del directorio de salida previsto, permitiendo a un atacante escribir archivos arbitrarios en el sistema del usuario."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Black Lantern Security",
          "product": "BBOT",
          "defaultStatus": "unaffected",
          "repo": "https://github.com/blacklanternsecurity/bbot",
          "versions": [
            {
              "version": "2.1.0",
              "lessThanOrEqual": "<=2.8.5",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-06-18T12:47:54.938181Z",
          "id": "CVE-2026-12568",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/blacklanternsecurity/bbot/commit/36bc20818",
      "source": "[email protected]"
    }
  ]
}