Directory Traversal Vulnerability in SAPCAR by SAP

CVE-2025-42970

What is CVE-2025-42970?

SAPCAR contains a flaw in its handling of file paths during the extraction of SAPCAR archives. This flaw allows attackers to create malicious archives with directory traversal sequences. When an unsuspecting user with elevated privileges extracts such an archive, it can lead to the extraction of files outside the designated directories, potentially overwriting critical files in arbitrary locations on the system. This vulnerability poses significant risks to the integrity and availability of the application, as it enables unauthorized access to system resources.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References