CVE-2026-120324 | Aklivity Zilla up to 1.3.4/2.4.7/2.5.0-rc2 http-filesystem Binding FileSystemServerFactory Path.resolve params path traversal

A vulnerability identified as critical has been detected in Aklivity Zilla up to 1.3.4/2.4.7/2.5.0-rc2. The affected element is the function Path.resolve of the file FileSystemServerFactory of the component http-filesystem Binding. This manipulation of the argument params causes path traversal.

This vulnerability is registered as CVE-2026-120324. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More