CVE-2026-105834

Description

Rundeck before 6.2.0 contains a path traversal vulnerability that allows users holding only the project configure ACL to read arbitrary server files by setting resources.source.N.config.file to any absolute path. Attackers can retrieve file contents through editProjectNodeSourceFile or the apiSourceGetContent endpoint to obtain database passwords, LDAP bind credentials, and other projects' data.

References

https://www.vulncheck.com/advisories/rundeck-before-6.2.0-arbitrary-file-read-via-file-resource-model-source

https://github.com/rundeck/rundeck/releases/tag/v6.2.0

https://github.com/rundeck/rundeck/pull/10437

https://github.com/rundeck/rundeck/commit/a462982aa22bf350c9e121d213283ffaa7994b4e

https://github.com/rundeck/rundeck/commit/5ec3d0ad2ef19c2bf8f206f27d693ba8bf3337a4

https://github.com/rundeck/rundeck/blob/v6.1.0/core/src/main/java/com/dtolabs/rundeck/core/resources/FileResourceModelSource.java

https://github.com/rundeck/rundeck

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-93378

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

CVSS v4

EPSS