CVE-2026-10621 — CVE-2026-10621
Path traversal in restore handler in Collibra Agent, allows an attacker to write arbitrary files via a crafted ZIP archive. Collibra Agent fails to properly validate and canonic…
Published: 2026-06-02 · CVSS: 7.5 · CVSS 3.1
Path traversal in restore handler in Collibra Agent, allows an attacker to write arbitrary files via a crafted ZIP archive. Collibra Agent fails to properly validate and canonicalize file path during ZIP extraction, this can allow an attacker to write files outside the intended extraction directory.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7