CVE-2026-49009

Description

Northern.tech Mender Server v4.1.0, v4.0.1 and below, and fixed in v4.1.1 and v4.0.2 allows Directory Traversal.

Affected Platforms

Weakness Type

CWE-22

References

• https://mender.io/blog/cve-2026-49009-cve-2026-33552-input-sanitization-and-acce…
• https://northern.tech