CVE-2026-10621: Collibra Platform (SaaS)

Описание

Оригинално описание

Path traversal in restore handler in Collibra Agent, allows an attacker to write arbitrary files via a crafted ZIP archive. Collibra Agent fails to properly validate and canonicalize file path during ZIP extraction, this can allow an attacker to write files outside the intended extraction directory.

Засегнати продукти

• Collibra Collibra Platform (SaaS): 2025.10 преди 2025.10.9
• Collibra Collibra Platform (SaaS): 2025.11 преди 2025.11.7
• Collibra Collibra Platform (SaaS): 2026.02 преди 2026.02.6
• Collibra Collibra Platform (SaaS): 2026.03 преди 2026.03.4
• Collibra Collibra Platform (SaaS): 2026.04 преди 2024.04.5
• Collibra Collibra Platform (on-prem): 2026.03 преди 2026.03.356
• Collibra Collibra Platform (on-prem): 2025.10 преди 2025.10.399

История

Други уязвимости в Collibra Collibra Platform (SaaS)

• 8.2CVE-2026-10622

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-10621
• https://nvd.nist.gov/vuln/detail/CVE-2026-10621
• https://www.collibra.com/
• https://kb.cert.org/vuls/id/873170