8.8

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-29065

CVE-2026-29065: changedetection.io: Zip Slip vulnerability in the backup restore functionality

changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, a Zip Slip vulnerability in the backup restore functionality allows arbitrary file overwrite via path traversal in uploaded ZIP archives. This issue has been patched in version 0.54.4.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-29065

CVE-2026-29065:

8.8

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
changedetection.io	pip	<= 0.54.3	0.54.4

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The analysis of the provided patch 1d7d812eb0faab37042246e2fbce04f29bb1b3aa confirms the Zip Slip vulnerability described. The core of the vulnerability lies in the import_from_zip function within changedetectionio/blueprint/backups/restore.py. Previously, this function used zipfile.ZipFile.extractall(tmpdir), which is known to be insecure if the archive contains malicious file paths (e.g., ../../../../etc/passwd). The patch rectifies this by removing the extractall call and implementing a secure extraction loop. This new implementation iterates through each file in the zip archive, resolves its absolute destination path, and verifies that it falls within the intended temporary directory before extraction. This prevents any path traversal attempts. The vulnerability is triggered when a user uploads a malicious backup zip file through the application's restore functionality.

Vulnerable functions

import_from_zip

changedetectionio/blueprint/backups/restore.py

The function `import_from_zip` is vulnerable to Zip Slip. It uses `zipfile.ZipFile.extractall` on a user-provided zip stream without validating the paths of the files inside the archive. An attacker can craft a zip file with directory traversal paths (`../`) to write files outside the intended temporary extraction directory, leading to arbitrary file overwrite. The patch replaces the call to `extractall` with a loop that validates each member's path before extraction.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.