CVE-2026-103508: Path traversal via logging configuration in P4Search
P4 Search (formerly Helix Search) allows an authenticated user holding administrative privileges on the connected P4 Server to supply a crafted logging configuration that causes files to be written or deleted outside the intended logging directory. This could lead to code execution as the P4 Search service account. This issue affects P4 Search 2026.4.2 and earlier.
Perforce resolved it in 2026.4.3.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
P4 Searchto a version that resolves this vulnerability.Fixed in 2026.4.3
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker must be authenticated and hold administrative privileges on the connected P4 Server. Users without those privileges are not identified as able to exploit the issue.
What impact could successful exploitation have?
A crafted logging configuration can write or delete files outside the intended logging directory. This could result in code execution as the P4 Search service account.
Which deployments need remediation?
P4 Search versions 2026.4.2 and earlier are affected. Perforce resolved the issue in P4 Search 2026.4.3.