Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow an authenticated Query Console user to supply unsafe… (CVE-2026-85964)

CVE-2026-85964 affects Progress MarkLogic Server 12.x releases prior to 12.1.0 and 11.x releases prior to 11.3.7. The vulnerability allows an authenticated user of the Query Console to provide unsafe path values to a privileged filesystem helper component. This can result in unauthorized disclosure of arbitrary files on the server. The vulnerability is classified under CWE-22 (Path Traversal). The CVSS v3.1 base score is 7.7, indicating high severity, with network attack vector, low attack complexity, and privileges required. The impact is confidentiality loss without integrity or availability impact.

An authenticated user with access to the Query Console can exploit this vulnerability to disclose arbitrary files on the server, potentially exposing sensitive information. There is no indication of integrity or availability impact. The vulnerability requires user privileges but no user interaction beyond authentication. The scope is changed, indicating that the vulnerability affects resources beyond the initially vulnerable component.

The input data does not provide explicit patch or remediation information. The description states that versions before 12.1.0 (for 12.x) and before 11.3.7 (for 11.x) are affected, implying that upgrading to 12.1.0 or 11.3.7 or later would remediate the issue. Patch status is not explicitly confirmed in the input data; therefore, users should verify with the vendor advisory for official fixes and remediation guidance before taking action.