Path Traversal in SINEC INS via SFTP Upload Endpoint

Executive Summary

CVE-2026-46747 is a vulnerability in the SINEC INS application versions before V1.0 SP2 Update 6. The issue occurs because the application does not properly sanitize path input in the GET /api/sftp/uploadFiles endpoint, which is used for directory listing.

This improper sanitization allows an attacker to perform a path traversal attack by crafting input that accesses unintended file system locations outside the allowed directory structure.

The vulnerability is classified as CWE-26: Path Traversal.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability could allow an authenticated remote attacker to access files outside the intended directory structure on the affected system.

Such unauthorized access to files may lead to exposure of sensitive information or system files, potentially compromising the confidentiality of data.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by monitoring requests to the GET /api/sftp/uploadFiles endpoint for path traversal patterns such as '../' sequences in the path input.

You can use network monitoring tools or web server logs to identify suspicious requests containing crafted input attempting directory traversal.

Example command to search for suspicious requests in web server logs (assuming logs are in access.log):

• grep "/api/sftp/uploadFiles" access.log | grep "\.\./"

Alternatively, using a network packet capture tool like tcpdump or Wireshark, filter HTTP GET requests to the vulnerable endpoint and inspect for path traversal payloads.

Useful 0 Not Useful 0

Mitigation Strategies

The immediate recommended step to mitigate this vulnerability is to update SINEC INS to version V1.0 SP2 Update 6 or later, where the issue is fixed.

Until the update can be applied, restrict access to the vulnerable endpoint by implementing network-level controls such as firewall rules or access control lists to limit access to trusted users only.

Additionally, monitor logs for suspicious activity targeting the /api/sftp/uploadFiles endpoint and respond accordingly.

Useful 0 Not Useful 0