Directory Traversal Vulnerability in IBM WebSphere Application Server - Liberty
CVE-2026-79715

5.5MEDIUM

Key Information:

Vendor

IBM
Status
Websphere Application Server - Liberty
Vendor
CVE Published:
13 October 2026

What is CVE-2026-79715?

A directory traversal vulnerability exists in IBM WebSphere Application Server - Liberty. This flaw allows a local attacker to potentially traverse directories and access unauthorized files by using a specially crafted application archive. The vulnerability impacts specific versions of the product, enabling attackers to write files outside the designated directory structure, which could lead to further exploitation or data exposure.

Affected Version(s)

WebSphere Application Server - Liberty 17.0.0.3 <= 26.0.0.9

References

https://www.ibm.com/support/pages/node/7291394
vendor-advisorypatch

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.