CVE-2026-110116 Details

A path traversal vulnerability has been identified in the Risesoft-y9 Digital-Infrastructure file manager, specifically in versions 9.6.5 through 9.6.11. The vulnerability exists in the 'storeFile' endpoint of the 'fileManager' microservice, allowing unauthenticated attackers to write arbitrary files. Exploitation involves sending crafted 'fullPath' and 'fileName' parameters to the 'POST /rest/storeFile' endpoint, which can create or overwrite files in directories writable by the service. This vulnerability could potentially lead to code execution if the written file is placed in a location that the server later serves or executes.

The vulnerability can be addressed by implementing a containment check that ensures the resolved file path remains within the designated root directory. This check should be applied to all handlers that accept 'fullPath' or 'fileName' parameters. Additionally, the 'fileManager' service should be secured with authentication and network restrictions to prevent untrusted access.