NGINX Agent Configuration Vulnerability Exposing File Access Risks

CVE-2026-60062

What is CVE-2026-60062?

The NGINX Agent's config_dirs directive poses a significant threat by enabling low-privileged attackers to gain unauthorized read and write access to files outside the secure directory. This security flaw, which can be manipulated via NGINX Instance Manager, allows an attacker to breach security boundaries. If exploited, it could lead to unauthorized access and potential data compromise, emphasizing the need for robust configuration management and timely patching.

References