CVE-2020-21527: Halo

High severity, CVSS 7.7. EPSS: 1.1% chance of exploitation in the next 30 days.

There is an Arbitrary file deletion vulnerability in halo v1.1.3. A backup function in the background allows a user, when deleting their backup files, to delete any files on the system through directory traversal.

Affected products

• Halo Halo: version 1.1.3 only

Published 2020-09-30. Last modified 2026-06-17.