Path Traversal Vulnerability in Open Security Issue Management by Red Hat

CVE-2026-1616

What is CVE-2026-1616?

A vulnerability exists in Open Security Issue Management (OSIM) that enables attackers to execute path traversal attacks by manipulating query parameters. The flaw is related to the concatenation of $uri and $args in the nginx configuration file. This misconfiguration allows unauthorized access to sensitive files within the server's file system, potentially compromising the integrity and confidentiality of the application.

References