CVE-2026-46724
The file indexer does not normalize the configured directory path.
Published May 19, 2026 · updated Jun 17, 2026
The file indexer does not normalize the configured directory path. A backend user with permission to edit indexer configurations can index documents from arbitrary locations on the server file system through path traversal sequences.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
May 19, 2026 · NIST NVD
Detected
The file indexer does not normalize the configured directory path. A backend user with permission to edit indexer configurations can index documents from arbitrary locations on the server file system through path traversal sequences.
Jun 17, 2026 · NIST NVD
Updated
The file indexer does not normalize the configured directory path. A backend user with permission to edit indexer configurations can index documents from arbitrary locations on the server file system through path traversal sequences.
Sources
- CVE.orgVulnerability recordCVE-2026-46724
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-46724
The file indexer does not normalize the configured directory path. A backend user with permission to edit indexer configurations can index documents from arbitrary locations on the server file system through path traversal sequences.
nvd.nist.gov