CVE-2026-70383

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Estonian Information System Authority (RIA) DigiDoc4 client. This issue affects DigiDoc4: from 4.0.0 before 4.11.0.

References

• https://github.com/open-eid/DigiDoc4-Client
• https://github.com/open-eid/DigiDoc4-Client/pull/1402
• https://github.com/open-eid/libdigidocpp/pull/736