{"id":"CVE-2026-16531","title":"Pcp: pcp: arbitrary file creation via path traversal in pmproxy logger servlet","summary":"An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary file and directory creation, potentially leading to a denial of service.","severity":"medium","cvss":5.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvssSource":"cna","cwe":["CWE-22"],"vendor":"Red Hat","product":"pcp","affected":["pcp (all versions)","pcp","pcp","pcp (all versions)","pcp (all versions)","openshift/ose-rhel-coreos-9 (all versions)","openshift/ose-rhel-coreos-9 (all versions)"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-07-30T14:38:02.856383Z"},"published":"2026-07-30","updated":"2026-11-05","sourceUpdated":"2026-11-05T19:24:02.312Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-16531","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-16531"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2506037","label":"RHBZ#2506037"}],"tags":["cve.org"],"epss":0.00505,"epssPercentile":0.4331,"ingestedAt":"2026-11-05T22:38:31.534Z","slug":"CVE-2026-16531","body":"## Overview\n\nAn unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary file and directory creation, potentially leading to a denial of service.\n\n## Affected\n\n- `pcp (all versions)`\n- `pcp`\n- `pcp`\n- `pcp (all versions)`\n- `pcp (all versions)`\n- `openshift/ose-rhel-coreos-9 (all versions)`\n- `openshift/ose-rhel-coreos-9 (all versions)`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n### Workarounds\n\nTo mitigate this issue, restrict network access to TCP port 44322, which is used by the pmproxy service. This can be achieved by configuring a firewall to block incoming connections to this port. Alternatively, if the pmproxy service is not essential for your environment, it can be disabled.\n\nTo disable the pmproxy service:\nsudo systemctl stop pmproxy\nsudo systemctl disable pmproxy\n\nWarning: Disabling pmproxy may impact the functionality of Performance Co-Pilot components that rely on it for data collection and logging.","depth":"sunlit","depthScore":29,"depthScoreParts":{"impact":29.2,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}