Path traversal in coTURN - CVE-2026-53449
Published: June 30, 2026
Vulnerability identifier: #VU135963
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2026-53449
CWE-ID: CWE-22
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vendor: coTURN
Affected software:
coTURN
coTURN
Detailed vulnerability description
The vulnerability allows a local privileged user to overwrite arbitrary files writable by the coturn process.
The vulnerability exists due to improper path validation in the psd CLI command handler when processing a user-supplied filename argument. A local privileged user can supply a crafted file path to overwrite arbitrary files writable by the coturn process.
The written content consists of session dump data, and an attacker can influence portions of that content by creating TURN allocations with crafted usernames.
How to mitigate CVE-2026-53449
Install security update from vendor's website.