CVE-2026-85964: Path traversal in Progress MarkLogic Server Query Console
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow an authenticated Query Console user to supply unsafe path values to a privileged filesystem helper, which could result in disclosure of arbitrary server files.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Progress MarkLogic Serverto a version that resolves this vulnerability.Fixed in 12.1.0 - Upgrade
Upgrade
Progress MarkLogic Serverto a version that resolves this vulnerability.Fixed in 11.3.7
Event History
Frequently Asked Questions
Which deployments are affected?
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 are affected through the Query Console.
What access does an attacker need?
An attacker needs to be authenticated as a Query Console user. No user interaction is required, and the issue can be exploited over the network.
What could an attacker obtain?
The flaw could allow disclosure of arbitrary files from the server by supplying unsafe path values to a privileged filesystem helper. The provided information does not indicate integrity or availability impact.
What versions remediate the issue?
Upgrade MarkLogic Server 12.x to 12.1.0 or later, or 11.x to 11.3.7 or later.