A vulnerability was found in theonedev onedev up to 15.0.1. It has been rated as critical. The affected element is an unknown function. The manipulation leads to path traversal.
This vulnerability is uniquely identified as CVE-2026-44647. The attack is possible to be carried out remotely. No exploit exists.
Upgrading the affected component is advised.