CVE-2026-47754

Metacat is data repository software that helps researchers preserve, share, and discover data. Versions 2.x through 2.19.1 and all 1.x versions contain an unauthenticated path traversal in the "archiveEntryName" parameter of the "action=read" endpoint that is part of the original 1.x Metacat API...

CVE-2026-47754: Improper Limitation of a Pathname to a Restricted Directory

Metacat is data repository software that helps researchers preserve, share, and discover data. Versions 2.x through 2.19.1 and all 1.x versions contain an unauthenticated path traversal in the archiveEntryName parameter of the action=read endpoint that is part of the original 1.x Metacat API...

PT-2026-69853

Name of the Vulnerable Software and Affected Versions Metacat versions 1.x through 2.19.1 Description Metacat contains an unauthenticated path traversal issue within the original 1.x API. The action=read endpoint fails to validate the archiveEntryName parameter, which is then concatenated into a...