GHSA-3mwv-j45g-vp3w

ghsaUSosv

ComposioHQ has a directory traversal vulnerability

view advisory published 2025-12-04Licence: CC-BY-4.0

Directory Traversal vulnerability in ComposioHQ v.0.7.20 allows a remote attacker to obtain sensitive information via the _download_file_or_dir function.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-56427US	—	0.89% (59th)	—	2025-12-04
Directory Traversal vulnerability in ComposioHQ v.0.7.20 allows a remote attacker to obtain sensitive information via the _download_file_or_dir function.

references

External citations — patches, advisories, analysis.

https://github.com/ComposioHQ/composioPACKAGE
https://github.com/ComposioHQ/composio/blob/master/python/composio/server/api.py#L278WEB
https://github.com/TOAST-Research/pocs/blob/main/composio/composio_1.mdWEB
https://nvd.nist.gov/vuln/detail/CVE-2025-56427ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan