Path traversal in restore handler in Collibra Agent, allows an attacker to write…
Priority LOW 39Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.
Summary
Path traversal in restore handler in Collibra Agent, allows an attacker to write arbitrary files via a crafted ZIP archive. Collibra Agent fails to properly validate and canonicalize file path during ZIP extraction, this can allow an attacker to write files outside the intended extraction directory.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00402 34th percentileScored 2026-11-07
Fix Fixed Collibra Platform (SaaS) (Collibra): 2025.10.9, 2025.11.7, 2026.02.6 +2Collibra Platform (on-prem) (Collibra): 2026.03.356, 2025.10.399
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Collibra | Collibra Platform (SaaS) | 2025.10 to before 2025.10.9 | 2025.10.9 | Patch available | CNA |
| Collibra | Collibra Platform (SaaS) | 2025.11 to before 2025.11.7 | 2025.11.7 | Patch available | CNA |
| Collibra | Collibra Platform (SaaS) | 2026.02 to before 2026.02.6 | 2026.02.6 | Patch available | CNA |
| Collibra | Collibra Platform (SaaS) | 2026.03 to before 2026.03.4 | 2026.03.4 | Patch available | CNA |
| Collibra | Collibra Platform (SaaS) | 2026.04 to before 2024.04.5 | 2024.04.5 | Patch available | CNA |
| Collibra | Collibra Platform (on-prem) | 2026.03 to before 2026.03.356 | 2026.03.356 | Patch available | CNA |
| Collibra | Collibra Platform (on-prem) | 2025.10 to before 2025.10.399 | 2025.10.399 | Patch available | CNA |
- Collibra Platform (SaaS) VendorCollibra Affected 2025.10 to before 2025.10.9 Fixed in 2025.10.9 Patch available CNA
- Collibra Platform (SaaS) VendorCollibra Affected 2025.11 to before 2025.11.7 Fixed in 2025.11.7 Patch available CNA
- Collibra Platform (SaaS) VendorCollibra Affected 2026.02 to before 2026.02.6 Fixed in 2026.02.6 Patch available CNA
- Collibra Platform (SaaS) VendorCollibra Affected 2026.03 to before 2026.03.4 Fixed in 2026.03.4 Patch available CNA
- Collibra Platform (SaaS) VendorCollibra Affected 2026.04 to before 2024.04.5 Fixed in 2024.04.5 Patch available CNA
- Collibra Platform (on-prem) VendorCollibra Affected 2026.03 to before 2026.03.356 Fixed in 2026.03.356 Patch available CNA
- Collibra Platform (on-prem) VendorCollibra Affected 2025.10 to before 2025.10.399 Fixed in 2025.10.399 Patch available CNA
Remediation
- Fix · CNA Collibra Platform (SaaS) (Collibra) Fixed in 2025.10.9
- Fix · CNA Collibra Platform (SaaS) (Collibra) Fixed in 2025.11.7
- Fix · CNA Collibra Platform (SaaS) (Collibra) Fixed in 2026.02.6
- Fix · CNA Collibra Platform (SaaS) (Collibra) Fixed in 2026.03.4
- Fix · CNA Collibra Platform (SaaS) (Collibra) Fixed in 2024.04.5
- Fix · CNA Collibra Platform (on-prem) (Collibra) Fixed in 2026.03.356
- Fix · CNA Collibra Platform (on-prem) (Collibra) Fixed in 2025.10.399
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Collibra Platform (SaaS), Collibra Platform (on-prem) 2025.10.399, 2025.10.9 and 4 more versions
2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW
Other records, highest priority first
- TI-2026-09129 Improper Authentication in REST API in Collibra Agent, allows a remote unauthenticated…Priority MEDIUM 42
Timeline
- 2026-10-02 Threatist record created from CVE-2026-10621
- 2026-10-03 Alias added: GHSA-j7r9-vcq6-6fv4
References
More Collibra vulnerabilities
- TI-2026-09129 Improper Authentication in REST API in Collibra Agent, allows a remote unauthenticated… CVSS 3.1HIGH 8.2
Sources
- CVE-2026-10621 · CVE Program
- CVE-2026-10621 · NVD
- FIRST EPSS
- GHSA-j7r9-vcq6-6fv4 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences