CVE-2026-107777: Thermo Fisher Torrent Suite Software Path Traversal
Thermo Fisher Torrent Suite Software is vulnerable to a path traversal, which could allow an authenticated attacker to read arbitrary files on the Torrent Server that are accessible to the web service account.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Thermo Fisher Torrent Suite Softwareto a version that resolves this vulnerability.Fixed in 5.22
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
An attacker must be authenticated to the Torrent Suite Software. No user interaction is required, and the attack can be performed over the network.
What data could be exposed if exploitation succeeds?
The attacker could read arbitrary files on the Torrent Server, limited to files that the web service account can access. The available information does not indicate that the issue permits file modification or service disruption.
How can I determine whether my deployment is affected?
The provided information identifies Thermo Fisher Torrent Suite Software as affected but does not provide affected or fixed version ranges, configuration prerequisites, or detection indicators. Review the vendor and CISA advisory references for applicability and remediation details.