NavigaTUM is a website and API to search for rooms, buildings and other places. Prior to commit 86f34c7, there is a path traversal vulnerability in the propose_edits endpoint allows unauthenticated users to overwrite files in directories writable by the application user (e.g., /cdn). By supplying unsanitized file keys containing traversal sequences (e.g., ../../) in the JSON payload, an attacker can escape the intended temporary directory and replace public facing images or fill the server's storage. This issue has been patched via commit 86f34c7.
References
| Link | Resource |
|---|---|
| https://github.com/TUM-Dev/NavigaTUM/commit/86f34c72886a59ec8f1e6c00f78a5ab889a70fd0 | Patch |
| https://github.com/TUM-Dev/NavigaTUM/pull/2650 | Exploit Issue Tracking Patch |
| https://github.com/TUM-Dev/NavigaTUM/security/advisories/GHSA-59hj-f48w-hjfm | Exploit Vendor Advisory |
| https://github.com/TUM-Dev/NavigaTUM/security/advisories/GHSA-59hj-f48w-hjfm | Exploit Vendor Advisory |
Configurations
History
11 Feb 2026, 19:10
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:tum:navigatum:*:*:*:*:*:*:*:* | |
| CWE | CWE-22 | |
| First Time |
Tum navigatum
Tum |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| References | () https://github.com/TUM-Dev/NavigaTUM/commit/86f34c72886a59ec8f1e6c00f78a5ab889a70fd0 - Patch | |
| References | () https://github.com/TUM-Dev/NavigaTUM/pull/2650 - Exploit, Issue Tracking, Patch | |
| References | () https://github.com/TUM-Dev/NavigaTUM/security/advisories/GHSA-59hj-f48w-hjfm - Exploit, Vendor Advisory |
05 Feb 2026, 18:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/TUM-Dev/NavigaTUM/security/advisories/GHSA-59hj-f48w-hjfm - |
04 Feb 2026, 22:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-04 22:16
Updated : 2026-02-11 19:10
NVD link : CVE-2026-25575
Mitre link : CVE-2026-25575
CVE.ORG link : CVE-2026-25575
JSON object : View
Products Affected
tum
- navigatum