CVE-2026-17614: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Red Hat Red Hat JBoss Enterprise Application Platform 7
CVE-2026-17614 is a path traversal vulnerability in WildFly's domain mode implementation used by Red Hat JBoss Enterprise Application Platform 7. It allows an attacker with access to a slave host controller secret or a compromised slave host controller to supply crafted relative paths that bypass directory restrictions. This can cause the Domain Controller to read and serve arbitrary files, potentially exposing sensitive information such as configuration files, keystores, and system credentials. The vulnerability requires high privileges and network access but no user interaction. Currently, no official fix or mitigation meeting Red Hat's criteria is available.
AI Analysis
Technical Summary
This vulnerability exists in the LocalFileRepository.getFile() and getConfigurationFile() methods of wildfly-core/deployment-repository, which fail to validate that resolved file paths remain within the configured repository or configuration root directories. An attacker who has obtained the slave host controller secret or compromised a slave host controller can exploit this by sending crafted relative paths containing directory traversal sequences (e.g., ../../etc/passwd) via the slave-DC wire protocol. This causes the Domain Controller to resolve and serve arbitrary files readable by the Domain Controller process, leading to unauthorized disclosure of sensitive files including configuration files, keystores, and system credentials. The vulnerability has a CVSS v3.1 base score of 4.4 (medium severity) with network attack vector, high attack complexity, and high privileges required. Red Hat has published an advisory but currently does not offer a fix or mitigation that meets their standards for ease of use, applicability, or stability.
Potential Impact
An attacker with access to the slave host controller secret or control over a slave host controller can read arbitrary files on the Domain Controller's filesystem. This unauthorized file disclosure can expose sensitive information such as configuration files, keystores, and system credentials. The vulnerability does not allow modification or deletion of files, nor does it impact system availability. The attack requires high privileges and network access but no user interaction.
Mitigation Recommendations
Red Hat currently states that no mitigation or fix meeting their criteria for ease of use, applicability, or stability is available for this vulnerability. Users should monitor the Red Hat advisory for updates and consider restricting access to slave host controller secrets and the slave-DC wire protocol to trusted entities only. Customers with a Red Hat Technical Account Manager (TAM) can consult directly for guidance. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.
CVE-2026-17614: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Red Hat Red Hat JBoss Enterprise Application Platform 7
Description
CVE-2026-17614 is a path traversal vulnerability in WildFly's domain mode implementation used by Red Hat JBoss Enterprise Application Platform 7. It allows an attacker with access to a slave host controller secret or a compromised slave host controller to supply crafted relative paths that bypass directory restrictions. This can cause the Domain Controller to read and serve arbitrary files, potentially exposing sensitive information such as configuration files, keystores, and system credentials. The vulnerability requires high privileges and network access but no user interaction. Currently, no official fix or mitigation meeting Red Hat's criteria is available.
CVSS v3.1
Score 4.4medium
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability exists in the LocalFileRepository.getFile() and getConfigurationFile() methods of wildfly-core/deployment-repository, which fail to validate that resolved file paths remain within the configured repository or configuration root directories. An attacker who has obtained the slave host controller secret or compromised a slave host controller can exploit this by sending crafted relative paths containing directory traversal sequences (e.g., ../../etc/passwd) via the slave-DC wire protocol. This causes the Domain Controller to resolve and serve arbitrary files readable by the Domain Controller process, leading to unauthorized disclosure of sensitive files including configuration files, keystores, and system credentials. The vulnerability has a CVSS v3.1 base score of 4.4 (medium severity) with network attack vector, high attack complexity, and high privileges required. Red Hat has published an advisory but currently does not offer a fix or mitigation that meets their standards for ease of use, applicability, or stability.
Potential Impact
An attacker with access to the slave host controller secret or control over a slave host controller can read arbitrary files on the Domain Controller's filesystem. This unauthorized file disclosure can expose sensitive information such as configuration files, keystores, and system credentials. The vulnerability does not allow modification or deletion of files, nor does it impact system availability. The attack requires high privileges and network access but no user interaction.
Mitigation Recommendations
Red Hat currently states that no mitigation or fix meeting their criteria for ease of use, applicability, or stability is available for this vulnerability. Users should monitor the Red Hat advisory for updates and consider restricting access to slave host controller secrets and the slave-DC wire protocol to trusted entities only. Customers with a Red Hat Technical Account Manager (TAM) can consult directly for guidance. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2026-07-27T19:09:57.628Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-17614","vendor":"Red Hat"}]
Threat ID: 6a71e167bf8831d539d34e30
Added to database: 08/04/2026, 12:56:07 UTC
Last enriched: 08/04/2026, 12:57:28 UTC
Last updated: 08/04/2026, 13:01:09 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.