CVE-2026-90530: ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed. RDS is purely a development feature meant for debugging purposes, and switching ColdFusion to Production Secure Profile automatically disables RDS. The Lockdown Guide outlines the specific step to disable RDS if a ColdFusion server is not being used in Production Secure Profile.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable RDS when the ColdFusion server is not using Production Secure Profile; switching to Production Secure Profile automatically disables RDS.
ColdFusion RDS RDS = disabled
Event History
Frequently Asked Questions
Which ColdFusion deployments are exposed?
Deployments with ColdFusion RDS enabled are exposed. RDS is a development feature; switching to Production Secure Profile automatically disables it.
Does exploitation require authentication, user interaction, or network access?
The provided vector indicates local attack access, low complexity, no privileges required, and no user interaction. The data does not state any additional authentication requirement.
What can be done if patching cannot happen immediately?
Disable RDS. Enabling ColdFusion Production Secure Profile disables RDS automatically; the Lockdown Guide also provides the specific procedure for disabling RDS outside that profile.
What should defenders look for when assessing possible impact?
Assess whether RDS is enabled and review for access to sensitive files or directories outside the intended RDS access scope. The vulnerability can allow arbitrary file system reads through path traversal.