CVE-2026-42085

Katalog CVE

CVSS 4.3 · Medium EPSS 0,41%

Kerentanan Relative Path Traversal pada openc3 cosmos. Skor CVSS 3.1 4.3 (Medium) menurut github.com.

Deskripsi (NVD)

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.10.5 and 7.0.0-rc3, OpenC3 COSMOS contains a design flaw in the save_tool_config() function that allows saving tool configuration files at arbitrary locations inside the shared /plugins directory tree by supplying crafted configuration filenames. Although the implementation sufficiently mitigates standard path traversal attacks, by canonicalizing filename to an absolute path, all plugins share this same root directory. That enables users to create arbitrary file structures and overwrite existing configuration files within the shared /plugins directory. This issue has been patched in versions 6.10.5 and 7.0.0-rc3.

Rincian

Terbit di NVD

4 Mei 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

4.3 (Medium), sumber github.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-23: Relative Path Traversal

EPSS (30 hari)

0,41% peluang dieksploitasi; lebih tinggi dari 33,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/OpenC3/cosmos/security/advisories/GHSA-4jvx-93h3-f45h exploit · advisory vendor
• https://github.com/OpenC3/cosmos/commit/9957a9fa460c0c0cf5cdbf6a5931bbdd025246a5 patch
• https://github.com/OpenC3/cosmos/commit/e6efccbd148ba0e3361c5891027f2373aa140d42 patch
• https://github.com/OpenC3/cosmos/releases/tag/v6.10.5 release notes
• https://github.com/OpenC3/cosmos/releases/tag/v7.0.0-rc3 release notes