A vulnerability was found in adenhq hive up to 0.11.0.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. May 17, 2026 · NIST NVD

   Detected

   A vulnerability was found in adenhq hive up to 0.11.0. This affects the function _read_events_tail of the file core/framework/server/routes_sessions.py of the component Delete Request Handler. Performing a manipulation results in path traversal. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not

2. Oct 14, 2026 · NIST NVD

   Updated

   A vulnerability was found in adenhq hive up to 0.11.0. This affects the function _read_events_tail of the file core/framework/server/routes_sessions.py of the component Delete Request Handler. Performing a manipulation results in path traversal. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not

Affected

• cpe adenhq/hiveversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-8757

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2026-8757

  30-day exploitation probability 0.6%

  first.org
• NIST NVDVulnerability recordCVE-2026-8757

  A vulnerability was found in adenhq hive up to 0.11.0. This affects the function _read_events_tail of the file core/framework/server/routes_sessions.py of the component Delete Request Handler. Performing a manipulation results in path traversal. The attack may be initiated remote

  nvd.nist.gov

References

• Third Party Advisory · gist.github.com
• Third Party Advisory · vuldb.com
• Third Party Advisory · vuldb.com
• Permissions Required · vuldb.com