CVE-2026-49133: Typemill

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Typemill before 2.24.0 contains a path traversal vulnerability that allows authenticated attackers with Author-level privileges to read arbitrary files outside the content directory by supplying traversal sequences in the path query parameter passed to Storage::getFile() with an empty folder argument. Attackers can bypass traversal-prevention controls in Storage::getFolderPath() to access sensitive files.

Affected products

• Typemill Typemill: before 2.24.0 (fixed in 2.24.0)

Published 2026-06-17. Last modified 2026-07-14.