Login Request a demo
High severity · published Oct 26, 2026
CVE-2026-116117
halo-dev halo View Name Resolver DefaultViewNameResolver.java path traversal
New
7.3
CVSS
0.5%
EPSS
No
On KEV
Description
A flaw has been found in halo-dev halo up to 2.27.0-beta.1. Affected by this vulnerability is the function run.halo.app.theme.DefaultViewNameResolver.resolveViewNameOrDefault of the file application/src/main/java/run/halo/app/theme/DefaultViewNameResolver.java of the component View Name Resolver. Executing a manipulation of the argument template can lead to path traversal. The attack may be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 43% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HA
halo · halo-dev
2.27.0-beta.0; 2.27.0-beta.1 · source: vendor
Affected product
HA
halo
halo-dev
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-116117
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-116117
vuldb.com
https://vuldb.com/cve/CVE-2026-116117
vuldb.com
https://vuldb.com/submit/1004845
vuldb.com
https://vuldb.com/vuln/426185
vuldb.com
https://vuldb.com/vuln/426185/cti
More from halo
9.8
CVE-2022-32995
Halo CMS v1.5.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the template remote download function
9.8
CVE-2022-32994
Halo CMS v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the component /api/admin/attachments/upload
9.8
CVE-2020-18980
Remote Code Executon vulnerability in Halo 0.4.3 via the remoteAddr and themeName parameters
9.8
CVE-2020-21526
An Arbitrary file writing vulnerability in halo v1.1.3
9.8
CVE-2020-21523
A Server-Side Freemarker template injection vulnerability in halo CMS v1.1.3 In the Edit Theme File function