Tag
#backups
Portabase Master Key Overwrite, Fixed in 1.21.2 (CVE-2026-67449)
An unauthenticated path traversal in Portabase's TUS webhook overwrites the AES-256 master key that protects encrypted backups; fixed in 1.21.2.
Nov 12, 2026
Tag
An unauthenticated path traversal in Portabase's TUS webhook overwrites the AES-256 master key that protects encrypted backups; fixed in 1.21.2.
Nov 12, 2026