ZDI 2026-10-13

ZDI-26-754: (0Day) Genesis World URDF Directory Traversal Information Disclosure Vulnerability

Machine-generated analysis · WAYSCloud LLM

Remote attackers can disclose sensitive information via a directory traversal in Genesis World.

Context

The advisory concerns Genesis World. It describes a directory traversal condition that leads to information disclosure. Exploitation requires interaction with the library, and attack vectors may differ by implementation.

Operator considerations

Check: Verify which systems have the Genesis World library installed.
Isolate: Restrict network or inter-process access to the library where possible.
Log: Enable logging of file system accesses related to the library.

From Zero Day Initiative ↗

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Genesis World. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 5.5.

Read the full advisory on ZDI →