OpenSave through 2.4.0 Arbitrary File Read and Write via Peer-Controlled Save Path

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-103398 · Microsoft / collected KEV context

cve-program · CVE-2026-103398

• https://gist.github.com/mansurmavlankulov/2ca66f95965fb9d4aab353bcf2434cdb
• https://github.com/Liquid-co/OpenSave/blob/v2.4.0/internal/p2p/routes.go#L555-L566
• https://github.com/Liquid-co/OpenSave/blob/v2.4.0/internal/delta/rootguard.go#L16-L30
• https://github.com/Liquid-co/OpenSave
• https://www.vulncheck.com/advisories/opensave-through-2.4.0-arbitrary-file-read-and-write-via-peer-controlled-save-path

No related operational record is retained in the current change model.