CVE-2026-84823
Received Received - Intake

Path Traversal in WildFly via take-snapshot Operation

Publication date: 2026-10-16

Last updated on: 2026-10-16

Assigner: redhat-SADP

Description
A flaw was found in WildFly. A user with the `Monitor` role, which is the lowest standard Role-Based Access Control (RBAC) role, can exploit a path traversal vulnerability in the `take-snapshot` operation. By manipulating the `name` parameter, this user can write a copy of the server configuration to an arbitrary location. This allows the `Monitor` role to read back the server configuration, including sensitive credentials, which would otherwise be restricted by RBAC, leading to information disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-16
Last Modified
2026-10-16
Generated
2026-10-16
AI Q&A
2026-10-16
EPSS Evaluated
N/A
NVD
CVE-2026-84823
EUVD
EUVD-2026-102546

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
Red Hat Red Hat Fuse 7 *
Red Hat Red Hat JBoss Enterprise Application Platform 7 *
Red Hat Red Hat JBoss Enterprise Application Platform 8 *
Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack *
Red Hat Red Hat Single Sign-On 7 *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-84823 is a path traversal vulnerability in WildFly's take-snapshot operation. A user with the Monitor role (lowest RBAC role) can manipulate the name parameter to write server configuration files to arbitrary locations. This allows them to read back sensitive credentials and configuration data that should be restricted by RBAC.

Detection Guidance

To detect this vulnerability, monitor WildFly management interface logs for unusual snapshot operations or file writes. Check for requests to the take-snapshot endpoint with manipulated name parameters containing path traversal sequences like ../../../../. Review file system changes in directories accessible to the Monitor role.

Impact Analysis

This vulnerability allows an attacker with Monitor role access to disclose sensitive server configuration and credentials. While it doesn't grant elevated privileges, it bypasses RBAC restrictions to expose confidential data. The impact is limited to information disclosure rather than system compromise.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR and HIPAA by exposing sensitive personal or health data stored in server configurations. Unauthorized access to credentials may also violate access control requirements in these regulations.

Mitigation Strategies

Restrict access to the WildFly management interface to trusted networks and users. Implement firewall rules to limit network reachability to management ports. Review RBAC assignments to ensure users have only the minimum necessary privileges. Avoid granting the Monitor role unless absolutely required.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-84823. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart