Dashboard / CVE-2026-106493

CVE-2026-106493

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 53/100
Published: 2026-10-06 Modified: 2026-10-22 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Interaction Scope Change

CVSS Vector Breakdown

AV: Network
AC: Low
PR: High
UI: None
S: Changed
C: Low
I: None
A: None

Description

Backstage is an open framework for building developer portals. Prior to 1.54.6, cloud storage catalog providers did not sufficiently validate object paths. A principal able to create or rename objects in a configured Azure Blob Storage or AWS S3 catalog source could cause catalog descriptors to be read from outside the intended storage boundary, limited to locations reachable with the backend's configured credentials. This issue is fixed in 1.54.6.

Weakness Classification (1)

Affected Software (4)

VendorProductVersion
linuxfoundation backstage < 1.54.6
linuxfoundation backstage\/backend-defaults < 0.17.8
linuxfoundation backstage\/plugin-catalog-backend-module-aws < 0.4.27
linuxfoundation backstage\/plugin-catalog-backend-module-azure < 0.3.21

References & Advisories (3)

Bug Bounty Relevance

53 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

4.1 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N

EPSS — Exploitation Probability

0.28%
Raw Score 0.002760
Percentile 20.1%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00276
2026-10-28
0.00276

Intelligence Sources

nvd ref →

External Links