CVE-2026-106047: Path Traversal
A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to read arbitrary files.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Ivanti Xtractionto a version that resolves this vulnerability.Fixed in 2026.4
Event History
Frequently Asked Questions
Who can exploit this issue?
A remote attacker must be authenticated and have access to the template export functionality. No user interaction is required.
What is the impact if exploitation succeeds?
An attacker can read arbitrary files from the affected Ivanti Xtraction system. The provided vector indicates high confidentiality impact, with no stated integrity or availability impact.
Which versions require remediation?
Ivanti Xtraction versions before 2026.4 are affected. Upgrading to version 2026.4 or later addresses the affected version range described.