Back to overview

CVE-2026-12701

CRITICAL
9.0
CVSS 3.1
Description
A path traversal vulnerability was found in pulpcore. The relative_path_validator function only verifies that content paths do not begin with "/" but fails to block directory traversal sequences such as "../" anywhere in the path. An authenticated administrator can craft a relative_path containing embedded traversal sequences (e.g., "looking/normal/../../../../etc/shadow") that escapes the intended export directory during FilesystemExport operations. Because the file content is also user-controlled (uploaded artifact), this allows arbitrary file write to any location writable by the Pulp service user, potentially leading to service compromise or further system exploitation.

Metadata

CVE ID
CVE-2026-12701
State
PUBLISHED
Assigner
redhat
Reserved
2026-06-19 09:53 UTC
Published
2026-07-20 14:18 UTC
Last updated
2026-07-20 21:26 UTC
Primary CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory …
Vendor / Product
Red Hat / Red Hat Ansible Automation Platform 2.5 for RHEL 8
Sources
cve.org  ·  NVD

Severity & Metrics

9.0 CRITICAL CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H
Affected products (18)
VendorProductPlatformVersions
Red Hat Red Hat Ansible Automation Platform 2 — —
Red Hat Red Hat Ansible Automation Platform 2 — —
Red Hat Red Hat Ansible Automation Platform 2 — —
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 — 0:3.49.63-2.el8ap < *
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 — 0:3.49.63-2.el9ap < *
Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 — 0:3.49.63-2.el9ap < *
Red Hat Red Hat Satellite 6.16 for RHEL 8 — 0:3.49.39-2.el8pc < *
Red Hat Red Hat Satellite 6.16 for RHEL 8 — 0:3.49.39-2.el8pc < *
Red Hat Red Hat Satellite 6.16 for RHEL 9 — 0:3.49.39-2.el9pc < *
Red Hat Red Hat Satellite 6.16 for RHEL 9 — 0:3.49.39-2.el9pc < *
Red Hat Red Hat Satellite 6.17 for RHEL 9 — 0:3.63.21-2.el9pc < *
Red Hat Red Hat Satellite 6.17 for RHEL 9 — 0:3.63.21-2.el9pc < *
Red Hat Red Hat Satellite 6.18 for RHEL 9 — 0:3.73.30-2.el9pc < *
Red Hat Red Hat Satellite 6.18 for RHEL 9 — 0:3.73.30-2.el9pc < *
Red Hat Red Hat Satellite 6.19 for RHEL 9 — 0:3.85.15-5.el9pc < *
Red Hat Red Hat Satellite 6.19 for RHEL 9 — 0:3.85.15-5.el9pc < *
Red Hat Red Hat Update Infrastructure 4 for Cloud Providers — —
Red Hat Red Hat Update Infrastructure 5 — —
Weakness (CWE)
CWESourceDescription
CWE-22 cna Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSS scores (1)
ScoreSeverityVersionSourceVector
9.0 CRITICAL 3.1 cna CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H
References (8)
Back to overview