CVE-2026-63162

Summary

A path traversal vulnerability in Omnispace Agora Project allows attackers to write arbitrary files outside the intended temporary directory by manipulating the tmpFolderName parameter. This can lead to remote code execution by placing malicious files in critical system locations.

Exploitability

The vulnerability is relatively easy to exploit as it requires only a single HTTP request with a crafted tmpFolderName parameter, with no additional authentication needed beyond basic access to the upload endpoint.

Blast radius

If exploited, this flaw could allow attackers to execute arbitrary code on the server, potentially leading to full system compromise and data exfiltration across the entire web application infrastructure.

Detection

Monitor for unusual file creation patterns in web root directories and check for HTTP requests containing traversal sequences like '../' in the tmpFolderName parameter, particularly from authenticated users with upload privileges.

Prioritized remediation

Upgrade to version 26.10.0 or later to remediate this path traversal vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.