CVE-2026-46671
📛 CVE Title
(no title)
Description
Rust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside the notebook directory
Overview
- State
- —
- Assigner (CNA)
- —
- CVSS severity
- medium
- CVSS score
- 4.4 / 10
- CVSS vector
AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L- Effective score
- 4.4 / 10 MEDIUM source: CNA overview
- CWE(s)
- —
- Reserved
- —
- Published
- —
- Last updated
- —
- Source
- https://www.tenable.com/cve/CVE-2026-46671
NVD / KEV / EPSS data refreshed 2026-05-25 00:14 UTC. Re-run the 🛰 Backfill from NVD button above to refresh.
European Union Vulnerability Database ENISA EUVD
ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.
- EUVD ID
-
EUVD-2026-45987 - Assigner
- GitHub_M
- Published
- Jul 20, 2026, 3:56:50 PM
- Updated
- Jul 20, 2026, 5:31:57 PM
- EUVD base score (CVSS 3.1)
-
4.4 / 10
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L - EUVD-reported EPSS
- 0.1400
- Vendors
- msiemens
- Products
-
onenote.rs (< 1.1.1)
- Aliases
-
GHSA-4j5m-wc25-pvh7
ENISA description: Rust OneNote File Parser is a parser for Microsoft OneNote files implemented in Rust. Prior to version 1.1.1, a maliciously crafted `.onetoc2` table-of-contents file can cause `Parser::parse_notebook` to open arbitrary files on the host filesystem outside the notebook's directory. The parser reads entry names listed inside the `.onetoc2` and joins them against the notebook's base directory without validating that they are relative paths confined to that directory. The parser will bail out when the target file fails to parse as a OneNote section, so direct content exfiltration through the parser's return value is not practical, though file-existence probing and denial-of-service via large or special files remain possible. Anyone using `onenote_parser` to parse .onetoc2 files received from untrusted sources is affected. Users who only ever parse their own notebooks are not at meaningful risk. The issue is fixed in onenote_parser 1.1.1. The fix rejects absolute paths, parent-directory components, and other invalid path characters in entry names, and additionally canonicalises the resolved path to confirm it stays inside the notebook's base directory. For users who cannot upgrade to 1.1.1, only call `Parser::parse_notebook` on `.onetoc2` files from trusted sources. Alternatively, use `Parser::parse_section` / `Parser::parse_section_buffer` on individual .one files, which do not perform the directory walk.
EUVD references (4)
- https://github.com/msiemens/onenote.rs/security/advisories/GHSA-4j5m-wc25-pvh7
- https://github.com/msiemens/onenote.rs/commit/c9267b2c96e2542be7e7b557d67318e81b733585
- https://github.com/msiemens/onenote.rs/blob/master/CHANGELOG.md#111---2026-05-15
- https://github.com/msiemens/onenote.rs/releases/tag/v1.1.1
Vendor references (0)
References embedded in the original CVE record by the assigning CNA.
None in the CVE record.
Web references (2)
DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.
- https://nvd.nist.gov/vuln/detail/CVE-2026-46671 tenable:nvd.nist.gov
- https://www.cve.org/CVERecord?id=CVE-2026-46671 tenable:www.cve.org
Remediations (10)
-
web:blog.qualys.com
Microsoft's February 2026 Patch Tuesday focuses on closing security gaps that attackers could exploit, reinforcing the importance of timely patching in enterprise environments. Here's a quick…
2026-05-26 03:09 UTC -
web:learn.microsoft.com
Windows 11, version 25H2 is now available for all eligible devices. Devices running Home and Pro editions of Windows 11 that are not managed by IT departments will receive the update to Windows 11, version 25H2 through the machine learning-based intelligent rollout.
2026-05-26 03:09 UTC -
web:nvd.nist.gov
An official website of the United States government Here's how you know
2026-05-26 03:09 UTC -
web:www.bleepingcomputer.com
Today is Microsoft's February 2026 Patch Tuesday with security updates for 58 flaws, including 6 actively exploited and three publicly disclosed zero-day vulnerabilities.
2026-05-26 03:09 UTC -
web:www.computerworld.com
Each month, the team at Readiness analyzes the latest Patch Tuesday updates from Microsoft and provides detailed, actionable testing guidance. The company's Patch Tuesday release for February ...
2026-05-26 03:09 UTC -
web:www.csoonline.com
Microsoft highlighted six new and actively exploited vulnerabilities among the 60 fixes issued in today's February Patch Tuesday releases.
2026-05-26 03:09 UTC -
web:www.neowin.net
Microsoft has released Patch Tuesday updates for Windows 11 KB5077181, KB5075941 for February 2026 . Here's what's included.
2026-05-26 03:09 UTC -
web:www.notebookcheck.net
Microsoft's February 2026 Windows 11 updates (KB5077181 and KB5075941) add security patches, bug fixes, and new Secure Boot rollout signals ahead of certificate expirations starting in June 2026 .
2026-05-26 03:09 UTC -
web:www.windowscentral.com
A faulty BitLocker configuration is forcing some PCs into BitLocker recovery mode after the April 2026 update, but there's a workaround to resolve this issue.
2026-05-26 03:09 UTC -
web:www.windowslatest.com
Windows 11 March 2026 Patch Tuesday update adds Emoji 16.0, Sysmon, network speed test, reliability improvements, and security fixes.
2026-05-26 03:09 UTC
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.