CVE-2026-102226

Summary

This vulnerability allows authenticated attackers to perform path traversal attacks in Dynamics Business Central, enabling them to access restricted files and potentially elevate privileges across the network. The flaw occurs when the application fails to properly limit file paths to a restricted directory, allowing attackers to navigate beyond intended boundaries.

Exploitability

Exploitation requires an authenticated user account with access to Dynamics Business Central, making it moderately difficult to achieve but not highly complex, as attackers can leverage the path traversal vulnerability to escalate privileges without additional credentials.

Blast radius

If exploited, this vulnerability could allow attackers to access sensitive business data, configuration files, and potentially gain elevated system privileges across the Dynamics Business Central environment.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Dynamics Business Central version 2026.1 or later to address this path traversal vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.