High · published July 21, 2026
In Progress ShareFile Storage Zones Controller versions prior to 5.12.5 and 6.0.2, an authenticated administrative user can exploit a path traversal vulnerability to read arbitrary files from the server filesystem, write files to arbitrary directories, or determine whether specific files exist on the server.
| Product | Versions | Fixed in |
|---|---|---|
| progress/sharefile_storage_zones_controller | < 5.12.6 | 5.12.6 |
| progress/sharefile_storage_zones_controller | ≥ 6.0, < 6.0.3 | 6.0.3 |