The vulnerability of the update function of the analytics and automation platform for Cisco Nexus Dashboard involves an incorrect path limitation to the catalog. This allows a malicious user to write arbitrary files into the system with root privileges.

The vulnerability of the metadata update function of the analytics and automation platform for Cisco Nexus Dashboard involves an incorrect limitation on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to write arbitrary files into the system with root privileg...

CVE-2026-20174

A vulnerability in the Metadata update feature of Cisco Nexus Dashboard Insights could allow an authenticated, remote attacker to write arbitrary files to an affected system. This vulnerability is due to insufficient validation of the metadata update file. An attacker could exploit this...

CVE-2026-20174 Cisco Nexus Dashboard Insights Arbitrary File Write Vulnerability

A vulnerability in the Metadata update feature of Cisco Nexus Dashboard Insights could allow an authenticated, remote attacker to write arbitrary files to an affected system. This vulnerability is due to insufficient validation of the metadata update file. An attacker could exploit this...