CVE-2022-34960 Path traversal in n/a
An attacker can exploit symbolic link handling in the container package to mount arbitrary files to any location on the host device.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-34960?
CVE-2022-34960 is a critical path traversal vulnerability in Mikrotik Routeros, published on 25 Aug 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The container package in MikroTik RouterOS 7.4beta4 allows an attacker to create mount points pointing to symbolic links, which resolve to locations on the host device. This allows the attacker to mount any arbitrary file to any location on the host.
Weakness: CWE-59
Which versions are affected by CVE-2022-34960?
It affects 1 product.
Products include Mikrotik Routeros.
How do I fix CVE-2022-34960?
No fix has been published for CVE-2022-34960 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2022-34960 being exploited?
There is no known exploitation of CVE-2022-34960 in the wild and no public exploit code.
Other vulnerabilities in Mikrotik Routeros
- CVE-2018-7445 MikroTik RouterOS Stack-Based Buffer Overflow
- CVE-2026-86060 MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command
- CVE-2018-14847 MikroTik Router OS Directory Traversal
- CVE-2026-67277 MikroTik RouterOS Missing Authentication for Critical Function
- CVE-2026-67279 Mikrotik RouterOS Improper Enforcement of Behavioral Workflow
Sources
Also known as GHSA-7g8f-q48w-7j35.