CVE-2023-40495: LG Simple Editor copyTemplateAll path traversal information disclosure

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 18 September 2026. Confidence: medium.

high priorityUnauthenticated remote file disclosure with SYSTEM-level context and very high EPSS, though no confirmed in-the-wild exploitation or KEV listing.

What it is

LG Simple Editor fails to validate a user-supplied path in the copyTemplateAll method, allowing directory traversal. A remote, unauthenticated attacker can read files outside the intended directory, and the disclosed data is returned in the context of SYSTEM.

Impact

An attacker gains read access to sensitive files on the host with SYSTEM-level privileges, which can expose credentials, configuration and other data useful for follow-on attacks.

Attack surface

Reachable over the network through the copyTemplateAll functionality with no authentication and no user interaction required, per the CVSS vector AV:N/AC:L/PR:N/UI:N.

Exploitation

Not listed in CISA KEV and no public exploit tag is present in the references, but EPSS is very high at roughly 0.757 (99.5th percentile), indicating elevated likelihood of attempted exploitation.

What to do

• Apply the vendor fix for LG Simple Editor once available; the record does not name a patched version, so confirm with LG.
• Restrict network access to the Simple Editor service to trusted hosts only.
• Run the service under a low-privilege account rather than SYSTEM to limit file disclosure scope.
• Monitor for and block traversal sequences in requests to the copyTemplateAll endpoint.
• If the product is not required, remove or disable it.

Detection

• Inspect service logs for requests to copyTemplateAll containing ../ or encoded traversal sequences.
• Alert on unexpected reads of sensitive files (configuration, credential stores) by the Simple Editor process.
• Baseline normal file paths accessed by the service and flag reads outside expected directories.
• Monitor network traffic to the Simple Editor port from untrusted sources.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.