CVE-2026-3749 - Vulnerability Details

- Bytedesk SVG File UploadRestService.java handleFileUpload unrestricted upload

Description

A weakness has been identified in Bytedesk up to 1.3.9. This vulnerability affects the function handleFileUpload of the file source-code/src/main/java/com/bytedesk/core/upload/UploadRestService.java of the component SVG File Handler. Executing a manipulation can lead to unrestricted upload. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 1.4.5.1 is able to resolve this issue. This patch is called 975e39e4dd527596987559f56c5f9f973f64eff7. It is recommended to upgrade the affected component.

Published: 2026-03-08

Score: 5.3 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

The vulnerability lies in the handleFileUpload method of Bytedesk's SVG File Handler. The code does not validate file types or enforce access control, allowing attackers to upload any file, including malicious code. This can compromise the application's integrity, and the impact depends on the content of the uploaded files and subsequent interactions with the system.

Affected Systems

Bytedesk web application versions 1.3.9 and earlier are affected. The developers released version 1.4.5.1, which applies the fix. No other vendors or product variants are mentioned.

Risk and Exploitability

The CVSS score of 5.3 indicates a medium severity, with an EPSS of less than 1% suggesting low but non‑zero exploitation probability. The vulnerability is accessible remotely via the upload endpoint and is not listed in the KEV catalog. Because the exploit code is publicly available, attackers with web access to the application could upload a crafted SVG or other file type to trigger the vulnerability.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

n/a

Bytedesk

affected

Version	Status	Constraints
`1.3.0`	affected	—
`1.3.1`	affected	—
`1.3.2`	affected	—
`1.3.3`	affected	—
`1.3.4`	affected	—
`1.3.5`	affected	—
`1.3.6`	affected	—
`1.3.7`	affected	—
`1.3.8`	affected	—
`1.3.9`	affected	—
`1.4.5.1`	unaffected	—

Configuration 1 [-]

cpe:2.3:a:bytedesk:bytedesk:*:*:*:*:*:*:*:*

No data.

Vendor Product Confidence Versions

Bytedesk

95%

Version	Status	Scheme	Platform
`1.3.0`	affected	semver	—
`1.3.1`	affected	semver	—
`1.3.2`	affected	semver	—
`1.3.3`	affected	semver	—
`1.3.4`	affected	semver	—
`1.3.5`	affected	semver	—
`1.3.6`	affected	semver	—
`1.3.7`	affected	semver	—
`1.3.8`	affected	semver	—
`1.3.9`	affected	semver	—
`1.4.5.1`	unaffected	semver	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

Upgrade Bytedesk to v1.4.5.1 or later.
Disable or restrict the file upload endpoint to accept only trusted file types.
Add server‑side validation to reject non‑SVG files and scan uploaded files for embedded scripts.

Generated by OpenCVE AI on April 16, 2026 at 10:32 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.00127.

Exploitation poc

Automatable no

Technical Impact partial

References

Link	Providers
https://github.com/Bytedesk/bytedesk/
https://github.com/Bytedesk/bytedesk/commit/975e39e4dd527596987559f56c5f9f973f64eff7
https://github.com/Bytedesk/bytedesk/issues/19
https://github.com/Bytedesk/bytedesk/issues/19#issue-3993480676
https://github.com/Bytedesk/bytedesk/issues/19#issuecomment-3976672845
https://github.com/Bytedesk/bytedesk/releases/tag/v1.4.5.1
https://vuldb.com/?ctiid.349727
https://vuldb.com/?id.349727
https://vuldb.com/?submit.768030

History

Wed, 11 Mar 2026 20:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 10 Mar 2026 19:00:00 +0000

Type	Values Removed	Values Added
CPEs		cpe:2.3:a:bytedesk:bytedesk::::::::

Mon, 09 Mar 2026 10:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Bytedesk Bytedesk bytedesk
Vendors & Products		Bytedesk Bytedesk bytedesk

Sun, 08 Mar 2026 16:15:00 +0000

Type	Values Removed	Values Added
Description		A weakness has been identified in Bytedesk up to 1.3.9. This vulnerability affects the function handleFileUpload of the file source-code/src/main/java/com/bytedesk/core/upload/UploadRestService.java of the component SVG File Handler. Executing a manipulation can lead to unrestricted upload. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 1.4.5.1 is able to resolve this issue. This patch is called 975e39e4dd527596987559f56c5f9f973f64eff7. It is recommended to upgrade the affected component.
Title		Bytedesk SVG File UploadRestService.java handleFileUpload unrestricted upload
Weaknesses		CWE-284 CWE-434
References		https://github.com/Bytedesk/bytedesk/ https://github.com/Bytedesk/bytedesk/commit/975e39e4dd527596987559f56c5f9f973f64eff7 https://github.com/Bytedesk/bytedesk/issues/19 https://github.com/Bytedesk/bytedesk/issues/19#issue-3993480676 https://github.com/Bytedesk/bytedesk/issues/19#issuecomment-3976672845 https://github.com/Bytedesk/bytedesk/releases/tag/v1.4.5.1 https://vuldb.com/?ctiid.349727 https://vuldb.com/?id.349727 https://vuldb.com/?submit.768030
Metrics		cvssV2_0 `{'score': 6.5, 'vector': 'AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C'}` cvssV3_0 `{'score': 6.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C'}` cvssV3_1 `{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C'}` cvssV4_0 `{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}`

Subscriptions

Bytedesk Bytedesk

MITRE

Status: PUBLISHED

Assigner: VulDB

Published: 2026-03-08T16:02:14.273Z

Updated: 2026-03-11T19:39:49.199Z

Reserved: 2026-03-07T20:23:08.679Z

Link: CVE-2026-3749

Vulnrichment

Updated: 2026-03-11T19:39:46.277Z

NVD

Status : Analyzed

Published: 2026-03-08T16:16:02.260

Modified: 2026-04-29T01:00:01.613

Link: CVE-2026-3749

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-04-16T10:45:26Z

Weaknesses

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Exploitation poc

Automatable no

Technical Impact partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object