VulnSocial

CVE-2026-121819

LOWCVSS 5.9 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability has been identified in armeria-xds versions 1.40.0 through 1.42.0, where DataSourcePolicy checks filename containment without resolving symbolic links, allowing a compromised or semi-trusted xDS control plane to cause the xDS client to read files outside configured allowed root directories when a symbolic link inside an allowed directory points outside it. In deployments using a credential injector, header-compatible text secrets may be exposed to an attacker-observable upstream.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-11-07: 111-07
Referenced assets9 URLs
Full discourse1 post
  • 테크워처@TheHour2359

    1. 원문 기사 LINE Armeria 1.43.0 보안 취약점 수정 분석 https://pwn.watch/i/line-armeria-1-43-0-path-decorator-thrift-saml-fixes-nov-2026 2. 공식 보안 권고 — GitHub Security Advisories - CVE-2026-121823 — 경로 기반 인증 우회 https://github.com/line/armeria/security/advisories/GHSA-xqhm-4ph4-423v - CVE-2026-121824 — Thrift 메모리 DoS https://github.com/line/armeria/security/advisories/GHSA-2pfv-5p52-crjm - CVE-2026-121820 — SAML 압축 해제 DoS https://github.com/line/armeria/security/advisories/GHSA-6hgp-j5h7-33m3 - CVE-2026-121821 — CORS 경로 제한 문제 https://github.com/line/armeria/security/advisories/GHSA-386q-mrg6-jfj8 - CVE-2026-121822 — FileService 저장형 XSS https://github.com/line/armeria/security/advisories/GHSA-x9vf-hjgg-cq25 - CVE-2026-121819 — xDS 심볼릭 링크 경로 우회 https://github.com/line/armeria/security/advisories/GHSA-m64h-m6r5-6jrx 3. 공식 릴리스 및 수정 코드 - Armeria 1.43.0 Release Notes https://armeria.dev/release-notes/1.43.0/ - GitHub 보안 수정 커밋 https://github.com/line/armeria/commit/e725eb8

    0000034
    2.2K followersView on X

Explore more

Back to dashboard