VDB

CVE-2026-12701

CVE-2026-12701 PUBLISHED CVSS 9 CRITICAL

Reported by redhat · Published July 20, 2026

A path traversal vulnerability was found in pulpcore. The relative_path_validator function only verifies that content paths do not begin with "/" but fails to block directory traversal sequences such as "../" anywhere in the path. An authenticated administrator can craft a relative_path containing embedded traversal sequences (e.g., "looking/normal/../../../../etc/shadow") that escapes the intended export directory during FilesystemExport operations. Because the file content is also user-controlled (uploaded artifact), this allows arbitrary file write to any location writable by the Pulp service user, potentially leading to service compromise or further system exploitation.

Risk Scores

CVSS 3.1
9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H

Affected Products

VendorProductVersions
Red HatRed Hat Ansible Automation Platform 2.5 for RHEL 80:3.49.63-2.el8ap
Red HatRed Hat Ansible Automation Platform 2.5 for RHEL 90:3.49.63-2.el9ap
Red HatRed Hat Ansible Automation Platform 2.6 for RHEL 90:3.49.63-2.el9ap
Red HatRed Hat Satellite 6.16 for RHEL 80:3.49.39-2.el8pc
Red HatRed Hat Satellite 6.16 for RHEL 80:3.49.39-2.el8pc
Red HatRed Hat Satellite 6.16 for RHEL 90:3.49.39-2.el9pc
Red HatRed Hat Satellite 6.16 for RHEL 90:3.49.39-2.el9pc
Red HatRed Hat Satellite 6.17 for RHEL 90:3.63.21-2.el9pc
Red HatRed Hat Satellite 6.17 for RHEL 90:3.63.21-2.el9pc
Red HatRed Hat Satellite 6.18 for RHEL 90:3.73.30-2.el9pc
Red HatRed Hat Satellite 6.18 for RHEL 90:3.73.30-2.el9pc
Red HatRed Hat Satellite 6.19 for RHEL 90:3.85.15-5.el9pc
Red HatRed Hat Satellite 6.19 for RHEL 90:3.85.15-5.el9pc
Red HatRed Hat Ansible Automation Platform 2.61783979593
Red HatRed Hat Ansible Automation Platform 2.71783919521
Red HatRed Hat Ansible Automation Platform 2
Red HatRed Hat Update Infrastructure 4 for Cloud Providers
Red HatRed Hat Update Infrastructure 5
Red HatRed Hat Ansible Automation Platform 2.6 for RHEL 90:3.49.63-2.el9ap
Red HatRed Hat Satellite 6.19 for RHEL 90:3.85.15-5.el9pc

…and 11 more

Timeline

  • Jul 20, 2026 Coalition ESS Score
  • Jul 20, 2026 CVE Published
  • Jul 22, 2026 Distribution Patch
  • Jul 22, 2026 Security Advisory
  • Jul 22, 2026 Distribution Patch
  • Jul 22, 2026 Security Advisory
  • Jul 22, 2026 Distribution Patch
  • Jul 22, 2026 Security Advisory
  • Jul 22, 2026 CVE Updated
  • Jul 23, 2026 Distribution Patch
  • Jul 23, 2026 Security Advisory
  • Aug 7, 2026 EPSS Score

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›