CVE-2026-28150

The Golo Framework versions prior to 1.7.5 are vulnerable to unauthenticated Local File Inclusion (LFI), which could allow attackers to access sensitive files on the server, potentially leading to data exposure or system compromise. Organizations utilizing the Golo Framework should prioritize patching to mitigate this high-severity vulnerability and protect their systems from exploitation.