Executive Summary

CVE-2026-55201 is a path traversal vulnerability in Evil-WinRM through version 3.9, specifically in the download_dir() function. This flaw allows a rogue or compromised remote Windows server to write files outside the intended download directory by returning filenames containing traversal sequences from the Get-ChildItem command output. These filenames are passed without proper sanitization to File.join(), enabling attackers controlling the remote server to overwrite sensitive client-side files.

By exploiting this vulnerability, attackers can overwrite important files such as SSH authorized_keys or shell configuration files on the client machine, which can lead to persistent access or privilege escalation.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can have serious impacts including unauthorized modification of sensitive client-side files. Attackers can gain persistent access or escalate privileges on the client machine by overwriting files like SSH authorized_keys or shell configuration files.

Such unauthorized access or privilege escalation can compromise the security and integrity of the affected system, potentially leading to further exploitation or data breaches.

Useful 0 Not Useful 0