---
id: CVE-2026-16531
title: 'Pcp: pcp: arbitrary file creation via path traversal in pmproxy logger servlet'
summary: >-
  An unauthenticated remote attacker can exploit a path traversal vulnerability
  in the PCP pmproxy logger servlet using a crafted hostname. This allows
  arbitrary file and directory creation, potentially leading to a denial of
  service.
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
cvssSource: cna
cwe:
  - CWE-22
vendor: Red Hat
product: pcp
affected:
  - pcp (all versions)
  - pcp
  - pcp
  - pcp (all versions)
  - pcp (all versions)
  - openshift/ose-rhel-coreos-9 (all versions)
  - openshift/ose-rhel-coreos-9 (all versions)
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-07-30T14:38:02.856383Z'
published: '2026-07-30'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T19:24:02.312Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-16531'
references:
  - url: 'https://access.redhat.com/security/cve/CVE-2026-16531'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2506037'
    label: RHBZ#2506037
tags:
  - cve.org
epss: 0.00505
epssPercentile: 0.4331
ingestedAt: '2026-11-05T22:38:31.534Z'
---

## Overview

An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary file and directory creation, potentially leading to a denial of service.

## Affected

- `pcp (all versions)`
- `pcp`
- `pcp`
- `pcp (all versions)`
- `pcp (all versions)`
- `openshift/ose-rhel-coreos-9 (all versions)`
- `openshift/ose-rhel-coreos-9 (all versions)`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

### Workarounds

To mitigate this issue, restrict network access to TCP port 44322, which is used by the pmproxy service. This can be achieved by configuring a firewall to block incoming connections to this port. Alternatively, if the pmproxy service is not essential for your environment, it can be disabled.

To disable the pmproxy service:
sudo systemctl stop pmproxy
sudo systemctl disable pmproxy

Warning: Disabling pmproxy may impact the functionality of Performance Co-Pilot components that rely on it for data collection and logging.