CVE-2026-49846
libks has path traversal in kws HTTP parser via URI segment overflow
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th
libks provides foundational support for signalwire C products. Prior to version 2.0.11, `clean_uri()` in libks's HTTP request parser fails to reject URIs whose path has more segments than its internal canonicalization buffer can hold. The canonicalization step silently passes such URIs through with embedded ".." sequences intact, enabling path traversal in any consumer that later joins the URI with a filesystem path. Version 2.0.11 patches the issue.
| CWE | CWE-22 CWE-697 |
| Vendor | signalwire |
| Product | libks |
| Published | Sep 11, 2026 |
| Last Updated | Sep 15, 2026 |
Stay Ahead of the Next One
Get instant alerts for signalwire libks
Be the first to know when new high vulnerabilities affecting signalwire libks are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
signalwire / libks
< 2.0.11