CVE-2026-110717Published
Janus WebRTC Server through 1.4.3 Path Traversal via Record&Play Filename
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-110717 · Microsoft / collected KEV context
cve-program · CVE-2026-110717
- https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/HkEaF-piGl
- https://github.com/meetecho/janus-gateway/blob/1f0b75cac1c9ad819ee4c2a905a2c65b00b82cde/src/plugins/janus_recordplay.c#L1965
- https://github.com/meetecho/janus-gateway/blob/1f0b75cac1c9ad819ee4c2a905a2c65b00b82cde/src/record.c#L218
- https://github.com/meetecho/janus-gateway
- https://www.vulncheck.com/advisories/janus-webrtc-server-through-1.4.3-path-traversal-via-record-play-filename
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.