CVE-2026-112248 grandnode CVE debrief

Who should care

Defenders responsible for grandnode grandnode2 deployments, particularly those using versions up to 2.3.0, should assess exposure and prioritize remediation. This includes operators, platform administrators, vulnerability management teams, and security teams who need to ensure the affected component is updated to version 2.4.0. Defenders should verify inventory and ensure affected versions are remediated to prevent potential exploitation.

Why it matters

Defenders should prioritize remediation of the path traversal vulnerability in grandnode grandnode2's Excel Import feature to prevent potential unauthorized access and data breaches.

• Remote attackers may attempt to exploit this vulnerability to access sensitive files or directories.
• Successful exploitation could lead to unauthorized file access or modification.
• Defenders should verify inventory and ensure affected versions are remediated to prevent potential exploitation.
• Remediation priority is high due to the potential for unauthorized access and the availability of a fix in version 2.4.0.

Technical summary

The vulnerability in grandnode grandnode2 up to 2.3.0 allows for path traversal attacks through the Excel Import feature, specifically in the ProductImportDataObject.PrepareProductPictures function. This could lead to unauthorized file access or modification. Defenders should prioritize upgrading to version 2.4.0 to address this vulnerability. The attack can be initiated remotely, and defenders should review and update inventory to ensure affected versions are identified and remediated. The manipulation of the argument Picture1/Picture2/Picture3 leads to path traversal.

Defensive priority

Defenders should prioritize upgrading to version 2.4.0 to address the path traversal vulnerability in grandnode grandnode2's Excel Import feature.

Recommended defensive actions

• Upgrade to version 2.4.0 to address the path traversal vulnerability
• Review and update inventory to ensure affected versions are identified and remediated
• Monitor for potential exploitation attempts targeting the Excel Import feature
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record and source item provide details on the vulnerability, including its impact on grandnode grandnode2 up to 2.3.0 and the availability of a fix in version 2.4.0. Defenders should verify inventory and ensure affected versions are remediated to prevent potential exploitation. Evidence is limited, and further verification is required to confirm affected scope and severity.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.