CVSS 3.1
6.0 mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:NCVE-2025-69820
Medium (6.0) in beam beta9. EPSS 1.0% chance of exploitation in the next 30 days.
Directory Traversal vulnerability in Beam beta9 v.0.1.521 allows a remote attacker to obtain sensitive information via the joinCleanPath function.
Severity
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
- CWE
- CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Affected
- beam:beta9
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-73jg-4qh6-3f4g | Go | github.com/beam-cloud/beta9 | <=0.0.0-20260116162221-c1cd75e813cf | no fix published |
| GO-2026-4390 | Go | github.com/beam-cloud/beta9 | all versions | no fix published |