ChangeDetection.io versions prior to 0.54.7 contain a protection bypass vulnerability in the SafeXPath3Parser implementation that allows attackers to read arbitrary local files by using unblocked XPath 3.0/3.1 functions such as json-doc() and similar file-access primitives. Attackers can exploit the incomplete blocklist of dangerous XPath functions to access sensitive data from the local filesystem.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- https://github.com/dgtlmoon/changedetection.io/commit/dadc804567a51f803cd6715f7885c11a247915f6 Patch
- https://www.vulncheck.com/advisories/changedetection-io-safexpath3parser-bypass-arbitrary-file-read Patch, Third Party Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.1 · webtechnologiesNVD modified 2026-10-25 23:10
Affected (CPE criteria) 1
cpe:2.3:a:webtechnologies:changedetection:*:*:*:*:*:*:*:*
References 3
- https://github.com/dgtlmoon/changedetection.io/commit/dadc804567a51f803cd6715f7885c11a247915f6 Patch
- https://github.com/dgtlmoon/changedetection.io/releases/tag/0.54.7 Release Notes
- https://www.vulncheck.com/advisories/changedetection-io-safexpath3parser-bypass-arbitrary-file-read Patch, Third Party Advisory