Path Traversal Vulnerability in Apache Juneau

CVE-2026-121489

What is CVE-2026-121489?

A path traversal vulnerability exists in Apache Juneau, allowing unauthorized file access outside the configured root directory due to improper limitation of request paths. When certain resource settings like view, upload, or delete are enabled, clients may gain the ability to read, write, or delete files anywhere the server process has access. This issue underscores the importance of stringent configuration and regular updates to mitigate security risks.

References