HIGH 7.5 NVD
CVE-2026-63644
bird-lg-go is a BIRD looking glass in Go. Prior to version 1.4.7, unsanitized input path enables arbitrary local file read, allowing an unauthenticated remote a
bird-lg-go is a BIRD looking glass in Go. Prior to version 1.4.7, unsanitized input path enables arbitrary local file read, allowing an unauthenticated remote attacker to read sensitive files such as /etc/shadow and /root/.bash_history. This issue has been patched in version 1.4.7.
References
- https://github.com/xddxdd/bird-lg-go/commit/74762e4be0d5f19edd710ebfae5b8e8c5bb30e32
- https://github.com/xddxdd/bird-lg-go/releases/tag/v1.4.7
- https://github.com/xddxdd/bird-lg-go/security/advisories/GHSA-3qm5-22pm-wqg9
This high severity vulnerability with a CVSS score of 7.5 was published on 2026-11-09 via NVD.
vulnfeed aggregates 17092 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.