CVE-2026-103508— Path traversal via logging configuration in P4Search
Quick assessment
Affected
Perforce P4 (Helix core)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
P4 Search（原名 Helix Search）中，已认证且在其连接的 P4 服务器上拥有管理员权限的用户，可通过提供精心构造的日志配置文件，导致文件在预期的日志目录之外被写入或删除。这可能导致以 P4 Search 服务账户的身份执行代码。此问题影响 P4 Search 2026.4.2 及更早版本。 Perforce 已于 2026.4.3 版本中修复了此问题。
Possible ATT&CK Techniques 1 AI
T1562Affected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Perforce | P4 (Helix core) | ≤ 2026.4.2 |
affected |
2026.4.3 |
unaffected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-103508
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Path traversal via logging configuration in P4Search
Source: CVE Program / CVE List V5
Vulnerability Description
P4 Search (formerly Helix Search) allows an authenticated user holding administrative privileges on the connected P4 Server to supply a crafted logging configuration that causes files to be written or deleted outside the intended logging directory. This could lead to code execution as the P4 Search service account. This issue affects P4 Search 2026.4.2 and earlier.
Perforce resolved it in 2026.4.3.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H
Source: CVE Program / CVE List V5
Vulnerability Type
相对路径遍历
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Perforce | P4 (Helix core) | 0 ~ 2026.4.2 | - |
|
II. Public POCs for CVE-2026-103508
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-103508
请登录查看更多情报信息。
Vendor Pages for CVE-2026-103508 (1)
IV. Related Vulnerabilities
Same product: P4 (Helix core)
-
CVE-2026-103509
Credential Disclosure in P4 Search Configuration API -
CVE-2026-103510
Authentication bypass via blank auth token in P4Search -
CVE-2026-103511
Arbitrary file-write via extension installation in P4Search -
CVE-2026-103512
Ticket host-binding bypass via spoofed client IP in P4Search -
CVE-2026-103507
Arbitrary file-write via log configuration path in P4Search
Same vendor: Perforce
-
CVE-2026-103509
Credential Disclosure in P4 Search Configuration API -
CVE-2026-109758
Perforce HAS 2022.1-2025.2 默认凭证致未授权访问 -
CVE-2026-103510
Authentication bypass via blank auth token in P4Search -
CVE-2026-103511
Arbitrary file-write via extension installation in P4Search -
CVE-2026-103512
Ticket host-binding bypass via spoofed client IP in P4Search
Same weakness: CWE-23
-
CVE-2026-111093
JetBrains Datalore <2026.2.1 未授权路径穿越漏洞 -
CVE-2026-41545
WebSocket timelapse path traversal and command injection -
CVE-2026-39993
Path Traversal to Root RCE in QNAP Download Station via Addo -
CVE-2026-76519
Cisco Secure Email Gateway Arbitrary File Write Vulnerabilit -
CVE-2026-110690
Cloud Commander 19.20.2 through 19.21.1 Path Traversal via G
V. Comments for CVE-2026-103508
No comments yet