Path Traversal Vulnerability in Akamai CLI Tool
CVE-2026-82518

7.1HIGH

Key Information:

Vendor: Akamai
Status: Akamai Cli
Vendor: CVE Published:; 10 November 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-82518?

Akamai CLI versions prior to 2.0.6 are susceptible to a path traversal vulnerability that permits malicious actors to write files outside the intended install directory. This exploitation occurs via unvalidated values from the commands[].name field within the cli.json configuration file. Attackers can leverage this weakness by persuading users to install or update compromised packages. Consequently, the resulting '..' segments can overwrite executable files located on the user's system PATH, leading to potential persistence even after the malicious package is uninstalled.

Affected Version(s)

Akamai CLI 0 < 2.0.6

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-82518 - Proof of Concept