CVE-2026-103512
MediumCVSS 5.3Summary
Perforce P4 Search prior to 2026.4.2 trusts a client-supplied address when validating certain authentication requests. An attacker holding a stolen P4 Server ticket can bypass host-based ticket restrictions and trusted-address controls, gaining access to P4 Search as the ticket's owner.
Risk Assessment
An attacker may gain unauthorized access to P4 Search, potentially leading to data confidentiality breaches or unauthorized actions in the system.
Recommendation
Update Perforce P4 Search to version 2026.4.2 or later, which includes a fix. Additionally, consider strengthening access controls and monitoring suspicious activities.
Other vulnerabilities in Perforce P4 Search
See all- CVE-2026-103511Medium
Perforce P4 Search prior to 2026.4.2 does not validate file names supplied to its extension installation feature. An attacker with super-user or service-token privileges can write files with arbitrary content to the P4 Search installation directory.
- CVE-2026-103507High
Perforce P4 Search prior to 2026.4.2 does not restrict file paths written through its logging configuration interface. An attacker holding the service authentication token can write arbitrary files on the host, potentially leading to code execution as the P4 Search service account.
Original NVD description (English source)
Perforce P4 Search prior to 2026.4.2 trusts a client-supplied address when validating certain authentication requests. An attacker holding a stolen P4 Server ticket can bypass host-based ticket restrictions and trusted-address controls, gaining access to P4 Search as the ticket's owner.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS