CVE-2026-105834
mediumRundeck before 6.2.0 contains a path traversal vulnerability that allows users holding only the project configure ACL to read arbitrary server files by setting…
Rundeck before 6.2.0 contains a path traversal vulnerability that allows users holding only the project configure ACL to read arbitrary server files by setting resources.source.N.config.file to any absolute path. Attackers can retrieve file contents through editProjectNodeSourceFile or the apiSourceGetContent endpoint to obtain database passwords, LDAP bind credentials, and other projects' data.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected products
Not reported by the source (unknown — not "none").
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
No vendor advisory or patch reference tagged by NVD. Check the references below.
References
- https://github.com/rundeck/rundeck disclosure@vulncheck.com
- https://github.com/rundeck/rundeck/blob/v6.1.0/core/src/main/java/com/dtolabs/rundeck/core... disclosure@vulncheck.com
- https://github.com/rundeck/rundeck/commit/5ec3d0ad2ef19c2bf8f206f27d693ba8bf3337a4 disclosure@vulncheck.com
- https://github.com/rundeck/rundeck/commit/a462982aa22bf350c9e121d213283ffaa7994b4e disclosure@vulncheck.com
- https://github.com/rundeck/rundeck/pull/10437 disclosure@vulncheck.com
- https://github.com/rundeck/rundeck/releases/tag/v6.2.0 disclosure@vulncheck.com
- https://www.vulncheck.com/advisories/rundeck-before-6.2.0-arbitrary-file-read-via-file-res... disclosure@vulncheck.com