Path Traversal Vulnerability in Google SecOps SOAR Server

CVE-2025-9918

What is CVE-2025-9918?

A critical path traversal vulnerability exists in the archive extraction component of Google SecOps SOAR Server, affecting several versions. This flaw allows an authenticated attacker with import permissions to exploit the system by uploading specially crafted ZIP archives containing path traversal sequences. When successful, this can lead to remote code execution, enabling attackers to execute arbitrary code on the server. Organizations using affected versions should assess their security posture and apply available patches promptly.

References