CVE-2026-110115 Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager retrieveFileStream
Unauthenticated attackers can read arbitrary files, including sensitive configuration credentials, via path traversal in the fileManager retrieveFileStream endpoint.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-110115?
CVE-2026-110115 is a high-severity path traversal vulnerability in risesoft-y9 Digital-Infrastructure, published on 13 Oct 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Risesoft Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager Y9FileController.retrieveFileStream handler that allows unauthenticated attackers to read arbitrary files by supplying parent-directory segments in the fullPath and fileName parameters. Attackers can request the unauthenticated /rest/retrieveFileStream endpoint to retrieve files like application.yml, exposing database, Redis and Nacos credentials.
Weakness: CWE-22
Which versions are affected by CVE-2026-110115?
How do I fix CVE-2026-110115?
No fix has been published for CVE-2026-110115 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2026-110115 being exploited?
There is no known exploitation of CVE-2026-110115 in the wild and no public exploit code.
Sources
Also known as GHSA-qqmw-cvh2-5395.