CVE-2026-47680 | FluxCD source-controller up to 1.8.4 Sparse-Checkout Feature path traversal

September 9, 2026 Yanac

A vulnerability was found in FluxCD source-controller up to 1.8.4. It has been declared as critical. The affected element is an unknown function of the component Sparse-Checkout Feature. Such manipulation leads to path traversal.

This vulnerability is listed as CVE-2026-47680. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More