Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A path traversal vulnerability was found in pulpcore. The relative_path_validator function only verifies that content paths do not begin with "/" but fails to block directory traversal sequences such as "../" anywhere in the path. An authenticated administrator can craft a relative_path containing embedded traversal sequences (e.g., "looking/normal/../../../../etc/shadow") that escapes the intended export directory during FilesystemExport operations. Because the file content is also user-controlled (uploaded artifact), this allows arbitrary file write to any location writable by the Pulp service user, potentially leading to service compromise or further system exploitation.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
🚨 CVE-2026-12701 — CVSS 9/10 █████████░ A path traversal vulnerability was found in pulpcore. The relative_path_validator function only verifies that content... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/R3Yj9KbsOH
Post summary
CVE-2026-12701 is a critical path traversal flaw in pulpcore with CVSS 9/10; a patch is already available.
🔗 Source: https://access.redhat.com/security/cve/CVE-2026-12701
Post summary
The text merely links to a Red Hat security advisory for CVE‑2026‑12701 without providing additional context or details.
⚠️ Linux Red Hat Ansible Automation Platform alert: CVE-2026-12701 (CVSS 9.0) Authenticated administrators could access files outside the intended path. Apply the vendor-documented workaround. https://vulnipulse.com/advisories/linux-cve-2026-12701 #Linux #RedHatAnsibleAutomationPlatform #CyberSecurity #CVE
Post summary
The advisory announces CVE-2026-12701, a high‑severity path traversal flaw in Red Hat Ansible Automation Platform, and recommends applying the vendor‑documented workaround.