CVE-2026-112343: Syncplify Server! < 8.8.0 Permission Override Bypass via Path Casing
Syncplify Server! before 8.8.0 contains an access control bypass vulnerability that allows authenticated SFTP users to evade per-path permission overrides by exploiting case-insensitive filesystem path resolution and 8.3 short names. Attackers can address a protected directory using alternate capitalization or its 8.3 short name to perform file uploads and downloads that the configured override is intended to deny, resulting in unauthorized file access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Syncplify Server!to a version that resolves this vulnerability.Fixed in 8.8.0
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated SFTP user can exploit it. The attacker needs access to a server where per-path permission overrides are configured to deny access to a directory.
What configuration conditions make a server vulnerable?
The issue affects Syncplify Server! versions before 8.8.0 when protected paths can be resolved through alternate capitalization or 8.3 short names. Those alternate path forms can bypass the intended per-path override.
What can an attacker do after bypassing an override?
They can upload files to, or download files from, a directory that the configured permission override was intended to deny.
What is the available remediation?
Upgrade Syncplify Server! to version 8.8.0 or later. The provided information does not identify a workaround for systems that cannot yet be upgraded.