CVE-2026-120324

A path traversal vulnerability exists in Aklivity Zilla versions up to 1.3.4, 2.4.7, and 2.5.0-rc2. The flaw is located in the Path.resolve function of the FileSystemServerFactory within the http-filesystem Binding component. Manipulation of the params argument allows for remote path traversal. P...

EUVD-2026-115007

A weakness has been identified in Aklivity Zilla up to 1.3.4/2.4.7/2.5.0-rc2. The affected element is the function Path.resolve of the file FileSystemServerFactory of the component http-filesystem Binding. This manipulation of the argument params causes path traversal. Remote exploitation of the...