LOW 3.3 GitHub
CVE-2026-68549
ClickMigrate has Path Traversal in "revision -m" argument
### Impact
A path traversal vulnerability in the `revision` command allowed a crafted migration name supplied via the `-m` argument to escape the intended migrations directory.
Under specific conditions, an attacker could cause the tool to create a `.sql` file in an arbitrary location writable by the user executing the command.
This issue is only exploitable if an attacker can influence the migration name passed to the `revision` command, such as through an insecure automation or CI/CD pipelin
Affected Products
- pip/ClickMigrate < 1.0.3
References
- https://github.com/advisories/GHSA-vgf9-9mxx-hq54
- https://github.com/QueueForge/ClickMigrate/security/advisories/GHSA-vgf9-9mxx-hq54
- https://github.com/QueueForge/ClickMigrate/commit/6b1f2c0202630a82252b3331aa57e64327e112b6
- https://github.com/advisories/GHSA-vgf9-9mxx-hq54
This low severity vulnerability with a CVSS score of 3.3 was published on 2026-10-16 via GitHub. Affected: pip/ClickMigrate < 1.0.3.
vulnfeed aggregates 16467 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.