CVE-2026-85964: CWE-22: Improper Limitation of a Pathname to a Restricted Directory in Progress Software Corporation MarkLogic Server

Progress MarkLogic Server versions >=11.0.0 <11.3.7 and >=12.0.0 <12.1.0 contain a directory traversal vulnerability (CWE-22). An authenticated user with access to the Query Console can provide unsafe path inputs to a privileged filesystem helper process. This can result in unauthorized disclosure of arbitrary files on the server filesystem. The vulnerability does not affect integrity or availability but has a high confidentiality impact. No known exploits in the wild have been reported. The vulnerability requires authentication and low attack complexity.

Successful exploitation allows an authenticated user to read arbitrary files on the server, potentially exposing sensitive information. The vulnerability impacts confidentiality (high) but does not affect integrity or availability. The attack requires privileges to access the Query Console, limiting exposure to authenticated users.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict Query Console access to trusted users only and monitor for suspicious activity. Avoid exposing the Query Console to untrusted networks. Follow vendor updates closely for patches addressing this vulnerability.