CVE-2026-89258 | Gohugoio Hugo up to 0.164.x Symlink os.ReadFile path traversal (Nessus ID 344907)

A vulnerability was found in Gohugoio Hugo up to 0.164.x. It has been rated as problematic. Affected is the function os.ReadFile of the component Symlink. Performing a manipulation results in path traversal. This vulnerability was named CVE-2026-89258. The attack may be initiated remotely. There is no available exploit. Upgrading the affected... Weiterlesen