CVE-2018-12561: Cantata Project Cantata

High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days.

An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. A regular user can inject additional mount options such as file_mode= by manipulating (for example) the domain parameter of the samba URL.

Affected products

• Cantata Project Cantata: up to and including 2.3.1

Published 2018-06-19. Last modified 2026-06-17.