GitHub Advisoryadvisory · Go
GHSA-73jg-4qh6-3f4g Beam Exposes sensitive information via joinCleanPath function
MEDIUM
Official page ↗
- Aliases
- CVE-2025-69820
- Ecosystem
- Go
- Packages
- github.com/beam-cloud/beta9
- Severity
- Moderate
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- Weaknesses
- CWE-22
- Reviewed
- 2026-01-29
Affected packages
• Go github.com/beam-cloud/beta9: <= 0.0.0-20260116162221-c1cd75e813cf (no fix yet)
Description
Directory Traversal vulnerability in Beam beta9 v.0.1.552 allows a remote attacker to obtain sensitive information via the joinCleanPath function
Related
Alias · CVE (1)
- CVE-2025-69820 Directory Traversal vulnerability in Beam beta9 v.0.1.521 allows a remote attacker to obtain sensitive information via the joinCleanPath… vulnerability
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness