CVE-2026-2979

This vulnerability allows an attacker to upload any file to the FastApiAdmin system without restrictions, which could lead to malicious files being executed on the server. The attack can be carried out remotely, meaning the attacker doesn't need physical access to the system to exploit this weakness.

This vulnerability allows an attacker to upload any file to the FastApiAdmin application, which could lead to malicious files being executed on the server. The issue affects versions up to 2.2.0 and can be exploited remotely without needing special access.

This vulnerability allows an attacker to remotely access sensitive information from the FastApiAdmin application by manipulating a specific file path in the download function. It affects versions up to 2.2.0, and the method to exploit this weakness is publicly available, making it easier for attackers to carry out their attacks.

This vulnerability allows an attacker to access sensitive information from the FastApiAdmin application remotely. It affects versions up to 2.2.0 and can be exploited through a specific function in the code that handles custom documentation, making it important for users to update to a secure version.