CVE-2026-85971
Received Received - Intake

Progress MarkLogic Server Improper File Permissions

Publication date: 2026-10-12

Last updated on: 2026-10-12

Assigner: Progress Software Corporation

Description
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 assign overly permissive operating-system permissions to certain log files, which could allow a local user to read or alter log data. The corrected default permissions apply to newly created and rotated logs; existing logs retain their current permissions until remediated.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-12
Last Modified
2026-10-12
Generated
2026-10-12
AI Q&A
2026-10-12
EPSS Evaluated
N/A
NVD
CVE-2026-85971
EUVD
EUVD-2026-97566

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
Progress Software Corporation MarkLogic Server 11.0.0
Progress Software Corporation MarkLogic Server 12.0.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-732 The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects Progress MarkLogic Server versions before 12.1.0 and 11.3.7. It involves overly permissive operating-system permissions assigned to certain log files, allowing local users to read or alter log data. Existing logs retain current permissions until remediated.

Detection Guidance

Check log file permissions on MarkLogic Server installations. Look for files in MarkLogic log directories with overly permissive permissions (e.g., 777 or 666). Use commands like 'ls -la /var/opt/MarkLogic/Logs' or 'find / -type f -name '*.log' -perm -777' to identify such files.

Impact Analysis

A local attacker could exploit this to access sensitive log data or modify logs, potentially covering tracks or extracting confidential information. This could lead to data breaches or unauthorized system access.

Compliance Impact

This vulnerability could violate compliance requirements like GDPR or HIPAA by allowing unauthorized access to sensitive data stored in logs. Organizations may face penalties for failing to protect personal or health information.

Mitigation Strategies

Update MarkLogic Server to version 12.1.0 or later for 12.x releases, or 11.3.7 or later for 11.x releases. Manually correct permissions on existing log files to restrict access to authorized users only (e.g., chmod 640 for log files).

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-85971. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart