CVE-2026-67970: Path Traversal

Published Aug 3, 2026

Updated

Incorrect access control in the DSSetDestPathCmd() component of NASA cFS v7.0.1 allows attackers to access sensitive components via a path traversal.

Affected Software

1 affected component

nasa cFS=7.0.1

Aug 3, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·10:16 PM

Description

CVE-2026-67970 has a risk score of 60, indicating a moderate severity level.

To fix CVE-2026-67970, implement proper access control measures to prevent unauthorized path traversal in the DS_SetDestPathCmd() component.

CVE-2026-67970 affects the NASA cFS version 7.0.1 specifically.

CVE-2026-67970 is classified as a Path Traversal vulnerability involving incorrect access control.

CVE-2026-67970 was published on August 3, 2026.