CVE-2026-85634

A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by WildFly and JBoss EAP to manage server deployments. The issue occurs when the library processes an unsanitized deployment name. Due to a missing containment check, an attacker...

CVE-2026-85634

The wildfly-core library, utilized by WildFly and JBoss EAP , contains a path traversal vulnerability within the ContentRepositoryImpl.copyExplodedContent function. The root cause is a missing containment check when processing unsanitized deployment names. An attacker possessing the Deployer RBAC...

CVE-2026-85634 Wildfly-core: wildfly-core: deployer rbac role privilege escalation via path traversal in deployment name

A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by WildFly and JBoss EAP to manage server deployments. The issue occurs when the library processes an unsanitized deployment name. Due to a missing containment check, an attacker...

EUVD-2026-102164

A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by WildFly and JBoss EAP to manage server deployments. The issue occurs when the library processes an unsanitized deployment name. Due to a missing containment check, an attacker...

CVE-2026-85634

A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by WildFly and JBoss EAP to manage server deployments. The issue occurs when the library processes an unsanitized deployment name. Due to a missing containment check, an attacker...

CVE-2026-85634 Wildfly-core: wildfly-core: deployer rbac role privilege escalation via path traversal in deployment name

A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by WildFly and JBoss EAP to manage server deployments. The issue occurs when the library processes an unsanitized deployment name. Due to a missing containment check, an attacker...

CVE-2026-85634

A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by WildFly and JBoss EAP to manage server deployments. The issue occurs when the library processes an unsanitized deployment name. Due to a missing containment check, an attacker...

CVE-2026-85634: Improper Limitation of a Pathname to a Restricted Directory

A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by WildFly and JBoss EAP to manage server deployments. The issue occurs when the library processes an unsanitized deployment name. Due to a missing containment check, an attacker...

PT-2026-115013

Name of the Vulnerable Software and Affected Versions wildfly-core affected versions not specified WildFly affected versions not specified JBoss EAP affected versions not specified Description A flaw exists in the copyExplodedContent function of the wildfly-core library, which manages server...

Wildfly path traversal vulnerability

Wildfly has a path traversal vulnerability. This vulnerability stems from the ContentRepositoryImpl.copyExplodedContent function in the wildfly-core library, which lacks a path inclusion check when handling uncleaned deployment names. Attackers with the Deployer RBAC role can exploit this...