CVE-2026-11431
HighCVSS 8.3Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
A path traversal vulnerability exists in the Projects Service download endpoint shared by Altium Enterprise Server and Altium 365. An authenticated user can supply a crafted path parameter that bypasses validation, allowing arbitrary files to be read from the server filesystem.
Risk Assessment
Sensitive files, including service configurations and credential material, may be exposed, enabling further compromises. In multi-tenant Altium 365 deployments, the exposed configuration could reveal shared credentials.
Recommendation
It is recommended to update Altium Enterprise Server to version 8.1.1 and apply service-level fixes in Altium 365 to mitigate this vulnerability.
Original NVD description (English source)
A path traversal vulnerability exists in the Projects Service download endpoint shared by Altium Enterprise Server and Altium 365. An authenticated user can supply a crafted path parameter that bypasses validation, allowing arbitrary files (including entire directories returned as archives) to be read from the server filesystem. Because the readable files include service configuration and credential material, exploitation can be used to gather information enabling further compromise. The issue can be combined with CVE-2026-11424 to reach the cloud-side endpoint. On multi-tenant Altium 365 deployments, the readable configuration could have exposed credentials shared across services. Altium Enterprise Server is fixed in 8.1.1; the issue has been remediated in Altium 365 at the service level.