CVE-2026-106034: Path Traversal
A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to create, modify, arbitrary directories the host file system.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Ivanti Xtractionto a version that resolves this vulnerability.Fixed in 2026.4
Event History
Frequently Asked Questions
Who can exploit this issue?
A remote attacker must be authenticated to exploit the vulnerability. No user interaction is required.
What systems are affected?
Ivanti Xtraction versions before 2026.4 are affected. The provided information does not identify any configuration prerequisite.
What could an attacker do after exploitation?
An authenticated attacker can create or modify arbitrary directories on the host file system. The provided data does not state whether files can be read, overwritten, or executed.
What is the available remediation?
Upgrade Ivanti Xtraction to version 2026.4 or later. No alternative mitigation is provided in the available information.