CVE-2026-48796: CefSharp.Common: `FolderSchemeHandlerFactory` path boundary check can expose files outside the configured root folder

June 30, 2026

FolderSchemeHandlerFactory was intended to restrict served files to a configured rootFolder, but its path validation used a raw string prefix check. A request could escape to a sibling directory whose full path starts with the root folder path, allowing files outside the configured root to be served.

References

github.com/advisories/GHSA-85jm-cwp2-mvpv
github.com/cefsharp/CefSharp/security/advisories/GHSA-85jm-cwp2-mvpv
nvd.nist.gov/vuln/detail/CVE-2026-48796

Code Behaviors & Features

Detect and mitigate CVE-2026-48796 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →