CVE-2026-107810

Summary

Nginx UI allows authenticated users to create backups that can inject symlinks into the staging directory during restore operations, enabling persistent configuration injection or denial of service even when restore flags are disabled. This affects versions 2.0.0 through 2.5.0.

Exploitability

Exploitation requires an authenticated user who can create and restore backups, making it moderately difficult but not highly complex to achieve with a compromised account.

Blast radius

The impact could be significant as attackers could inject malicious Nginx configuration or cause persistent denial of service by manipulating files in the live configuration path through crafted backup restores.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 2.5.0 or later to remediate this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.