8.7
High
CVE-2026-4092 Path Traversal in Clasp impacting versions < 3.2.0 allows a remote attacker to perform remote code execution via a…
Description
Path Traversal in Clasp impacting versions < 3.2.0 allows a remote attacker to perform remote code execution via a malicious Google Apps Script project containing specially crafted filenames with directory traversal sequences.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Clasp 3.2 | earliest → < 3.2.0 | 3.2.0 |