CVE-2026-102627: Security Vulnerability identified in IBM TRIRIGA - Zip Slip
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of file paths during archive extraction.
Other sources
IBM TRIRIGA could allow a remote authenticated attacker to execute arbitrary code due to improper validation of file paths during archive extraction.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM TRIRIGA Application Platformto a version that resolves this vulnerability.Fixed in 5.0.9
Event History
Frequently Asked Questions
Which deployments are affected?
IBM TRIRIGA Application Platform versions 5.0.0 through 5.0.8 are affected.
What level of access does an attacker need?
An attacker must be remotely authenticated. No user interaction is required.
What could successful exploitation allow?
Successful exploitation could allow arbitrary code execution with high impact to confidentiality, integrity, and availability.