CVE-2020-37214: The Control Group Voyager

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Voyager 1.3.0 contains a directory traversal vulnerability that allows attackers to access sensitive system files by manipulating the asset path parameter. Attackers can exploit the path parameter in /admin/voyager-assets to read arbitrary files like /etc/passwd and .env configuration files.

Affected products

• The Control Group Voyager: version 1.3.0 only

Published 2026-02-11. Last modified 2026-10-01.