CVE-2026-7411

{
  "id": "CVE-2026-7411",
  "sourceIdentifier": "[email protected]",
  "published": "2026-05-05T16:16:18.360",
  "lastModified": "2026-10-26T19:10:00.163",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, inadequate path normalization in the Submodel HTTP API allows an unauthenticated remote attacker to perform a path traversal attack. By supplying a maliciously crafted fileName parameter during a file upload operation, an attacker can bypass intended storage boundaries and write arbitrary files to any location on the host filesystem accessible by the Java process. This can lead to Remote Code Execution (RCE) and complete system compromise."
    },
    {
      "lang": "es",
      "value": "En las versiones del SDK de servidor Java Eclipse BaSyx anteriores a 2.0.0-milestone-10, una normalización de ruta inadecuada en la API HTTP del Submodelo permite a un atacante remoto no autenticado realizar un ataque de salto de ruta. Al proporcionar un parámetro fileName maliciosamente elaborado durante una operación de carga de archivos, un atacante puede eludir los límites de almacenamiento previstos y escribir archivos arbitrarios en cualquier ubicación del sistema de archivos del host accesible por el proceso Java. Esto puede conducir a Ejecución Remota de Código (RCE) y a un compromiso completo del sistema."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Eclipse Foundation",
          "product": "Eclipse BaSyx",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "lessThan": "2.0.0-milestone-10",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
          "baseScore": 10.0,
          "baseSeverity": "CRITICAL",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "CHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 6.0
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-05-05T17:01:53.279261Z",
          "id": "CVE-2026-7411",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://gitlab.eclipse.org/security/cve-assignment/-/issues/102",
      "source": "[email protected]"
    },
    {
      "url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/423",
      "source": "[email protected]"
    },
    {
      "url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/423",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ]
}