CVE-2026-57795

The vulnerability in themelexus Kitchor allows for local file inclusion due to improper control of filenames in PHP include/require statements, potentially enabling attackers to execute arbitrary code on the server. This high-severity flaw affects versions up to and including 1.4.3, making it critical for users of Kitchor to prioritize immediate patching or mitigation measures to prevent exploitation. Organizations utilizing this software should assess their exposure and take action to secure their systems against potential attacks.