Path Traversal Vulnerability in Syncplify Server! by Syncplify

CVE-2026-112344

What is CVE-2026-112344?

Syncplify Server! prior to version 8.8.0 is susceptible to a path traversal vulnerability that enables attackers to exploit symbolic links placed within user home directories. This vulnerability allows unauthorized access to files beyond the designated virtual filesystem root. The confinement mechanism implemented by the server only considers the requested path, failing to account for the on-disk target of a symbolic link or directory junction. As a result, attackers may leverage this flaw to access sensitive or restricted files that lie outside the intended boundaries of the user’s home folder, posing a significant security risk.

References