CVE-2026-12701— Pulp Project Pulp 路径遍历漏洞
一分钟漏洞结论
影响对象
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
pulp project pulp是pulp project团队开源的一个软件包管理平台。 Pulp Project Pulp存在路径遍历漏洞，该漏洞源于relative_path_validator函数仅验证内容路径不以“/”开头，但未能阻止路径中的目录遍历序列（如“../”），经身份验证的管理员可在FilesystemExport操作期间构造包含嵌入遍历序列的relative_path，将用户控制的上传文件写入Pulp服务用户可写的任意位置，可能导致服务被入侵或进一步系统利用。
影响版本矩阵 18
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2026-12701 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Pulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemexport
来源: CVE Program / CVE List V5
Vulnerability Description
A path traversal vulnerability was found in pulpcore. The relative_path_validator function only verifies that content paths do not begin with "/" but fails to block directory traversal sequences such as "../" anywhere in the path. An authenticated administrator can craft a relative_path containing embedded traversal sequences (e.g., "looking/normal/../../../../etc/shadow") that escapes the intended export directory during FilesystemExport operations. Because the file content is also user-controlled (uploaded artifact), this allows arbitrary file write to any location writable by the Pulp service user, potentially leading to service compromise or further system exploitation.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H
来源: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
来源: CVE Program / CVE List V5
Vulnerability Title
Pulp Project Pulp 路径遍历漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
pulp project pulp是pulp project团队开源的一个软件包管理平台。 Pulp Project Pulp存在路径遍历漏洞，该漏洞源于relative_path_validator函数仅验证内容路径不以“/”开头，但未能阻止路径中的目录遍历序列（如“../”），经身份验证的管理员可在FilesystemExport操作期间构造包含嵌入遍历序列的relative_path，将用户控制的上传文件写入Pulp服务用户可写的任意位置，可能导致服务被入侵或进一步系统利用。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 | 0:3.49.63-2.el8ap ~ * |
cpe:/a:redhat:ansible_automation_platform:2.5::el8
|
|
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 9 | 0:3.49.63-2.el9ap ~ * |
cpe:/a:redhat:ansible_automation_platform:2.5::el8
|
|
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 | 0:3.49.63-2.el9ap ~ * |
cpe:/a:redhat:ansible_automation_platform:2.6::el10
|
|
| Red Hat | Red Hat Satellite 6.16 for RHEL 8 | 0:3.49.39-2.el8pc ~ * |
cpe:/a:redhat:satellite:6.16::el8
|
|
| Red Hat | Red Hat Satellite 6.16 for RHEL 8 | 0:3.49.39-2.el8pc ~ * |
cpe:/a:redhat:satellite:6.16::el8
|
|
| Red Hat | Red Hat Satellite 6.16 for RHEL 9 | 0:3.49.39-2.el9pc ~ * |
cpe:/a:redhat:satellite:6.16::el8
|
|
| Red Hat | Red Hat Satellite 6.16 for RHEL 9 | 0:3.49.39-2.el9pc ~ * |
cpe:/a:redhat:satellite:6.16::el8
|
|
| Red Hat | Red Hat Satellite 6.17 for RHEL 9 | 0:3.63.21-2.el9pc ~ * |
cpe:/a:redhat:satellite:6.17::el9
|
|
| Red Hat | Red Hat Satellite 6.17 for RHEL 9 | 0:3.63.21-2.el9pc ~ * |
cpe:/a:redhat:satellite:6.17::el9
|
|
| Red Hat | Red Hat Satellite 6.18 for RHEL 9 | 0:3.73.30-2.el9pc ~ * |
cpe:/a:redhat:satellite:6.18::el9
|
|
| Red Hat | Red Hat Satellite 6.18 for RHEL 9 | 0:3.73.30-2.el9pc ~ * |
cpe:/a:redhat:satellite:6.18::el9
|
|
| Red Hat | Red Hat Satellite 6.19 for RHEL 9 | 0:3.85.15-5.el9pc ~ * |
cpe:/a:redhat:satellite:6.19::el9
|
|
| Red Hat | Red Hat Satellite 6.19 for RHEL 9 | 0:3.85.15-5.el9pc ~ * |
cpe:/a:redhat:satellite:6.19::el9
|
|
| Red Hat | Red Hat Ansible Automation Platform 2.6 | 1783979593 ~ * |
cpe:/a:redhat:ansible_automation_platform:2.6::el9
|
|
| Red Hat | Red Hat Ansible Automation Platform 2.7 | 1783919521 ~ * |
cpe:/a:redhat:ansible_automation_platform:2.7::el9
|
|
| Red Hat | Red Hat Ansible Automation Platform 2 | - |
cpe:/a:redhat:ansible_automation_platform:2
|
|
| Red Hat | Red Hat Update Infrastructure 4 for Cloud Providers | - |
cpe:/a:redhat:rhui:4::el8
|
|
| Red Hat | Red Hat Update Infrastructure 5 | - |
cpe:/a:redhat:rhui:5::el9
|
|
二、漏洞 CVE-2026-12701 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2026-12701 的情报信息
请登录查看更多情报信息。
CVE-2026-12701 厂商安全公告 (10)
-
-
-
🔗 RHSA-2026:42142 - Security Advisory - Red Hat Customer Portal 查看完整文章 vendor-advisory x_refsource_REDHAT
-
🔗 RHSA-2026:42151 - Security Advisory - Red Hat Customer Portal 查看完整文章 vendor-advisory x_refsource_REDHAT
-
-
🔗 RHSA-2026:42079 - Security Advisory - Red Hat Customer Portal 查看完整文章 vendor-advisory x_refsource_REDHAT
-
-
-
🔗 RHSA-2026:42078 - Security Advisory - Red Hat Customer Portal 查看完整文章 vendor-advisory x_refsource_REDHAT
-
🔗 RHSA-2026:42132 - Security Advisory - Red Hat Customer Portal 查看完整文章 vendor-advisory x_refsource_REDHAT
同批安全公告 · Red Hat · 2026-07-20 · 共 8 条
| CVE-2026-16242 | 9.4 CRITICAL | OpenShift HyperShift 授权问题漏洞 |
| CVE-2026-64612 | 7.5 HIGH | OpenPrinting libcupsfilters 异常处理不当漏洞 |
| CVE-2026-12080 | 7.3 HIGH | QEMU 后置链接漏洞 |
| CVE-2026-15813 | 6.5 MEDIUM | Kronosnet 缓冲区错误漏洞 |
| CVE-2026-16277 | 6.5 MEDIUM | Red Hat Enterprise Linux 10 缓冲区错误漏洞 |
| CVE-2026-15588 | 5.3 MEDIUM | GNOME GLib 资源管理错误漏洞 |
| CVE-2026-16254 | 4.3 MEDIUM | QUAY Claircore 缓冲区错误漏洞 |
IV. Related Vulnerabilities
Same product: Red Hat Ansible Automation Platform 2.5 for RHEL 8
V. Comments for CVE-2026-12701
暂无评论