CVE-2026-103508 PUBLISHED

Path traversal via logging configuration in P4Search

Assigner: Perforce
Reserved: 30.09.2026 Published: 15.10.2026 Updated: 15.10.2026

P4 Search (formerly Helix Search) allows an authenticated user holding administrative privileges on the connected P4 Server to supply a crafted logging configuration that causes files to be written or deleted outside the intended logging directory. This could lead to code execution as the P4 Search service account. This issue affects P4 Search 2026.4.2 and earlier.

Perforce resolved it in 2026.4.3.

Metrics

CVSS 4.0

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H
CVSS Score: 7.3

Exploitability Metrics		Vulnerable System Impact Metrics		Subsequent System Impact Metrics
Attack Vector	Network	Confidentiality	Low	Confidentiality	Low
Attack Complexity	Low	Integrity	High	Integrity	High
Attack Requirements	Present	Availability	High	Availability	High
Privileges Required	High
User Interaction	None

CVSS 4.0

Product Status

Vendor	Perforce
Product	P4 (Helix core)
Versions	Default: unaffected affected from 0 to 2026.4.2 (incl.) Version 2026.4.3 is unaffected

References

https://portal.perforce.com/s/cve/a91Qi000003GdOfIAK/path-traversal-via-logging-configuration-in-p4search

Problem Types

CWE-23 Relative path traversal CWE

Impacts

CAPEC-126 Path Traversal