CVE-2026-7411
CriticalSummary
In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, inadequate path normalization in the Submodel HTTP API allows an unauthenticated remote attacker to perform a path traversal attack. An attacker can supply a maliciously crafted fileName parameter during a file upload operation, allowing arbitrary files to be written to any location on the host filesystem.
Risk Assessment
This can lead to Remote Code Execution (RCE) and complete system compromise, posing a serious security threat to the organization.
Recommendation
It is recommended to upgrade to version 2.0.0-milestone-10 or later to mitigate this vulnerability and implement additional access control mechanisms for file upload operations.
Other vulnerabilities in Eclipse BaSyx Java Server SDK
See all- CVE-2026-57898Critical
In Eclipse BaSyx Java Server SDK versions 2.0.0-milestone-05 to 2.0.0-milestone-12, deployments using MongoDB backend are vulnerable to unauthenticated arbitrary file write via the AAS thumbnail API. An attacker can upload a file with a controlled filename and then trigger retrieval, writing the content to any path on the server filesystem.
- CVE-2026-7412High
In Eclipse BaSyx Java Server SDK prior to version 2.0.0-milestone-10, the Operation Delegation feature fails to validate the destination URI. An unauthenticated attacker can force the BaSyx server to execute blind HTTP POST requests to arbitrary internal or external targets, bypassing network segmentation.
Original NVD description (English source)
In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, inadequate path normalization in the Submodel HTTP API allows an unauthenticated remote attacker to perform a path traversal attack. By supplying a maliciously crafted fileName parameter during a file upload operation, an attacker can bypass intended storage boundaries and write arbitrary files to any location on the host filesystem accessible by the Java process. This can lead to Remote Code Execution (RCE) and complete system compromise.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS