GitHub Advisoryadvisory · Maven

GHSA-9jg3-g3wh-w9pj Yamcs has Unauthenticated Directory Traversal

HIGH Published 2026-08-28 Modified 2026-08-28 Official page ↗
Aliases
CVE-2026-55552
Ecosystem
Maven
Packages
org.yamcs:yamcs-core
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-22
Reviewed
2026-08-28

Affected packages

• Maven org.yamcs:yamcs-core: < 5.12.0 → fixed in 5.12.0

Description

Attack type:  Unauthenticated remote  Impact: Attackers can access any system files from the underlying host. Affected components: HttpRequestHandler.java, StaticFileHandler.java An Unauthenticated Directory Traversal vulnerability exists in Yamcs Steps to Reproduce: 1. Start Yamcs and login as a user 2. Paste the following URL in the browser and press enter: ``` http://localhost:8090//etc/passwd ``` 3. The `/etc/passwd` file will be downloaded. Acknowledgements This vulnerability was discovered by Abderrahim Dahmani while solving a STARPWN 2025 CTF challenge at DEFCON 33 offered by VisionSpace Technologies.

Related

Alias · CVE (1)

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References