CVE-2026-110935
Path traversal in plug-in deployment
Description
The PFI plugin framework deployment routine does not validate path components when extracting archive entries to the local plugin repository. Archive entries containing relative path segments such as '..' are not rejected, allowing an unauthenticated local attacker to write files outside the plugin repository to arbitrary locations accessible with the current user's permissions which could result in full system compromise.
INFO
Published Date :
Nov. 4, 2026, 9:20 a.m.
Last Modified :
Nov. 4, 2026, 9:20 a.m.
Remotely Exploit :
No
Source :
CERTVDE
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | HIGH | 270ccfa6-a436-4e77-922e-914ec3a9685c | ||||
| CVSS 3.1 | HIGH | [email protected] | ||||
| CVSS 4.0 | HIGH | 270ccfa6-a436-4e77-922e-914ec3a9685c | ||||
| CVSS 4.0 | HIGH | [email protected] |
Solution
- Validate archive entry paths to prevent directory traversal.
- Ensure archive entries do not contain '..'.
- Sanitize all extracted file paths.
- Deploy the updated PFI plugin framework.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-110935 vulnerability anywhere in the article.