CVE-2026-103507: Arbitrary file-write via log configuration path in P4Search
Perforce P4 Search prior to 2026.4.2 does not restrict file paths written through its logging configuration interface. An attacker holding the service authentication token can write arbitrary files on the host, potentially leading to code execution as the P4 Search service account.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Perforce P4 Searchto a version that resolves this vulnerability.Fixed in 2026.4.2
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs the P4 Search service authentication token. The available information does not indicate that unauthenticated users can exploit it.
What systems are affected?
Perforce P4 Search versions prior to 2026.4.2 are affected. Exploitation can write arbitrary files on the P4 Search host.
What is the potential impact of successful exploitation?
An attacker may be able to write arbitrary files as the P4 Search service account. This could potentially be used to achieve code execution with that account's privileges.