CLEANSTART-2026-SZ68981: Applications using Spring Framework's FreeMarker integration may be vulnerable to a path traversal attack when a controller returns a view name derived from untrusted input and FreeMarker is config...

Q: Which Rundeck deployments are exposed to this issue?

Exposure depends on the application using Spring Framework's FreeMarker integration with templates resolved through SpringTemplateLoader. A controller must also return a view name derived from untrusted input.

Q: What access does an attacker need to exploit it?

The vector is network-based, and the vulnerability requires low privileges. No user interaction is required.

Q: What is the potential impact of successful exploitation?

Successful exploitation may allow disclosure of information. The provided severity vector does not indicate integrity or availability impact.

Published Nov 11, 2026

Updated

Security vulnerability affects the rundeck package. Applications using Spring Framework's FreeMarker integration may be vulnerable to a path traversal attack when a controller returns a view name derived from untrusted input and FreeMarker is configured to resolve templates through SpringTemplateLoader.

Affected Software

2 affected componentsFixes available

cleanstart/rundeck<6.3.0-r0

6.3.0-r0

cleanstart/rundeck<6.1.0-r4

6.1.0-r4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/rundeck to a version that resolves this vulnerability.
Fixed in 6.3.0-r0
Upgrade
Upgrade cleanstart/rundeck to a version that resolves this vulnerability.
Fixed in 6.1.0-r4

Event History

Nov 11, 2026

Advisory Published

via OSV·12:39 AM

Data Sourced

via OSV·12:39 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-59280

Frequently Asked Questions

Which Rundeck deployments are exposed to this issue?

Exposure depends on the application using Spring Framework's FreeMarker integration with templates resolved through SpringTemplateLoader. A controller must also return a view name derived from untrusted input.

What access does an attacker need to exploit it?

The vector is network-based, and the vulnerability requires low privileges. No user interaction is required.

What is the potential impact of successful exploitation?

Successful exploitation may allow disclosure of information. The provided severity vector does not indicate integrity or availability impact.

CLEANSTART-2026-SZ68981: Applications using Spring Framework's FreeMarker integration may be vulnerable to a path traversal attack when a controller returns a view name derived from untrusted input and FreeMarker is config...

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which Rundeck deployments are exposed to this issue?

What access does an attacker need to exploit it?

What is the potential impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which Rundeck deployments are exposed to this issue?

What access does an attacker need to exploit it?

What is the potential impact of successful exploitation?