CVE-2026-108141: Path Traversal
Published Oct 27, 2026
·Updated
A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal.
Event History
Oct 27, 2026
CVE Published
via MITRE·04:16 PM
Data Sourced
via MITRE·04:16 PM
DescriptionWeakness
Frequently Asked Questions
1
Is authentication required to exploit this issue?
Yes. Exploitation requires an authenticated user assigned the Restore Operator role.
2
What additional access does an attacker need?
The attacker must control the contents of a backed-up NAS share. The issue can then be used to write attacker-controlled files to arbitrary paths on the backup server through relative path traversal.