Org.wildfly.core: wildfly: path traversal in take-snapshot discloses the server configuration to the monitor role

Summary

A flaw was found in WildFly. A user with the `Monitor` role, which is the lowest standard Role-Based Access Control (RBAC) role, can exploit a path traversal vulnerability in the `take-snapshot` operation. By manipulating the `name` parameter, this user can write a copy of the server configuration to an arbitrary location. This allows the `Monitor` role to read back the server configuration, including sensitive credentials, which would otherwise be restricted by RBAC, leading to information disclosure.

Timeline

1. Oct 15, 2026, 11:47 PM UTCCVE published
2. Oct 16, 2026, 4:31 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: partial

3. Oct 26, 2026, 2:36 PM UTCRecord last updated

Affected versions

• pki-core:10.6/resteasy

  Version range not reported

• pki-deps:10.6/resteasy

  Version range not reported

• resteasy

  Version range not reported

• wildfly-cli

  Version range not reported

• wildfly-controller

  Version range not reported

• wildfly-controller-client

  Version range not reported

• wildfly-core-galleon-pack

  Version range not reported

• wildfly-core-management-client

  Version range not reported

• wildfly-core-management-subsystem

  Version range not reported

• wildfly-core-security

  Version range not reported

• wildfly-core-security-api

  Version range not reported

• wildfly-deployment-repository

  Version range not reported

• wildfly-deployment-scanner

  Version range not reported

• wildfly-discovery

  Version range not reported

• wildfly-domain-http-error-context

  Version range not reported

• wildfly-domain-http-interface

  Version range not reported

• wildfly-domain-management

  Version range not reported

• wildfly-elytron-integration

  Version range not reported

• wildfly-elytron-tool-wrapper

  Version range not reported

• wildfly-embedded

  Version range not reported

• wildfly-event-logger

  Version range not reported

• wildfly-host-controller

  Version range not reported

• wildfly-io

  Version range not reported

• wildfly-jmx

  Version range not reported

• wildfly-launcher

  Version range not reported

• wildfly-logging

  Version range not reported

• wildfly-management-client-content

  Version range not reported

• wildfly-model-test

  Version range not reported

• wildfly-network

  Version range not reported

• wildfly-patching

  Version range not reported

• wildfly-platform-mbean

  Version range not reported

• wildfly-process-controller

  Version range not reported

• wildfly-protocol

  Version range not reported

• wildfly-remoting

  Version range not reported

• wildfly-request-controller

  Version range not reported

• wildfly-security-manager

  Version range not reported

• wildfly-self-contained

  Version range not reported

• wildfly-server

  Version range not reported

• wildfly-subsystem-test-framework

  Version range not reported

• wildfly-threads

  Version range not reported

• wildfly-version

  Version range not reported

• jboss-eap-7/eap74-els-openjdk11-openshift-rhel8

  Version range not reported

• jboss-eap-7/eap74-els-openjdk17-openshift-rhel8

  Version range not reported

• jboss-eap-7/eap74-els-openjdk8-openshift-rhel8

  Version range not reported

• wildfly-cli

  Version range not reported

• wildfly-controller

  Version range not reported

• wildfly-controller-client

  Version range not reported

• wildfly-core-build

  Version range not reported

• wildfly-core-build-legacy

  Version range not reported

• wildfly-core-component-matrix-builder

  Version range not reported

• wildfly-core-dist

  Version range not reported

• wildfly-core-dist-legacy

  Version range not reported

• wildfly-core-feature-pack

  Version range not reported

• wildfly-core-feature-pack-common

  Version range not reported

• wildfly-core-feature-pack-ee-8-api

  Version range not reported

• wildfly-core-feature-pack-galleon-common

  Version range not reported

• wildfly-core-feature-pack-galleon-pruned

  Version range not reported

• wildfly-core-feature-pack-parent

  Version range not reported

• wildfly-core-galleon-pack

  Version range not reported

• wildfly-core-management

  Version range not reported

• wildfly-core-management-client

  Version range not reported

• wildfly-core-management-subsystem

  Version range not reported

• wildfly-core-model-test

  Version range not reported

• wildfly-core-model-test-controller-optional

  Version range not reported

• wildfly-core-model-test-framework

  Version range not reported

• wildfly-core-model-test-tests

  Version range not reported

• wildfly-core-parent

  Version range not reported

• wildfly-core-security

  Version range not reported

• wildfly-core-security-api

  Version range not reported

• wildfly-core-security-parent

  Version range not reported

• wildfly-core-testbom

  Version range not reported

• wildfly-core-test-runner

  Version range not reported

• wildfly-core-testsuite-shared

  Version range not reported

• wildfly-deployment-repository

  Version range not reported

• wildfly-deployment-scanner

  Version range not reported

• wildfly-discovery

  Version range not reported

• wildfly-domain-http

  Version range not reported

• wildfly-domain-http-error-context

  Version range not reported

• wildfly-domain-http-interface

  Version range not reported

• wildfly-domain-management

  Version range not reported

• wildfly-elytron-integration

  Version range not reported

• wildfly-elytron-tool-wrapper

  Version range not reported

• wildfly-embedded

  Version range not reported

• wildfly-event-logger

  Version range not reported

• wildfly-host-controller

  Version range not reported

• wildfly-io

  Version range not reported

• wildfly-io-bom

  Version range not reported

• wildfly-io-tests

  Version range not reported

• wildfly-jmx

  Version range not reported

• wildfly-launcher

  Version range not reported

• wildfly-logging

  Version range not reported

• wildfly-management-client-content

  Version range not reported

• wildfly-model-test

  Version range not reported

• wildfly-network

  Version range not reported

• wildfly-patching

  Version range not reported

• wildfly-platform-mbean

  Version range not reported

• wildfly-process-controller

  Version range not reported

• wildfly-protocol

  Version range not reported

• wildfly-remoting

  Version range not reported

• wildfly-remoting-parent

  Version range not reported

• wildfly-remoting-test

  Version range not reported

• wildfly-request-controller

  Version range not reported

• wildfly-security-manager

  Version range not reported

• wildfly-server

  Version range not reported

• wildfly-subsystem-test

  Version range not reported

• wildfly-subsystem-test-framework

  Version range not reported

• wildfly-subsystem-test-parent

  Version range not reported

• wildfly-subsystem-test-tests

  Version range not reported

• wildfly-threads

  Version range not reported

• wildfly-version

  Version range not reported

• wildfly-cli

  Version range not reported

• wildfly-controller

  Version range not reported

• wildfly-controller-client

  Version range not reported

• wildfly-core-management-client

  Version range not reported

• wildfly-core-management-subsystem

  Version range not reported

• wildfly-core-security

  Version range not reported

• wildfly-deployment-repository

  Version range not reported

• wildfly-deployment-scanner

  Version range not reported

• wildfly-discovery

  Version range not reported

• wildfly-domain-http-interface

  Version range not reported

• wildfly-domain-management

  Version range not reported

• wildfly-elytron-integration

  Version range not reported

• wildfly-elytron-tool-wrapper

  Version range not reported

• wildfly-embedded

  Version range not reported

• wildfly-event-logger

  Version range not reported

• wildfly-host-controller

  Version range not reported

• wildfly-installation-manager

  Version range not reported

• wildfly-io

  Version range not reported

• wildfly-io-spi

  Version range not reported

• wildfly-jar-boot

  Version range not reported

• wildfly-jar-runtime

  Version range not reported

• wildfly-jmx

  Version range not reported

• wildfly-logging

  Version range not reported

• wildfly-management-client-content

  Version range not reported

• wildfly-network

  Version range not reported

• wildfly-patching

  Version range not reported

• wildfly-platform-mbean

  Version range not reported

• wildfly-process-controller

  Version range not reported

• wildfly-protocol

  Version range not reported

• wildfly-remoting

  Version range not reported

• wildfly-request-controller

  Version range not reported

• wildfly-security-manager

  Version range not reported

• wildfly-server

  Version range not reported

• wildfly-service

  Version range not reported

• wildfly-subsystem

  Version range not reported

• wildfly-threads

  Version range not reported

• wildfly-version

  Version range not reported

• wildfly-cli

  Version range not reported

• wildfly-controller

  Version range not reported

• wildfly-controller-client

  Version range not reported

• wildfly-core-management-client

  Version range not reported

• wildfly-core-management-subsystem

  Version range not reported

• wildfly-core-security

  Version range not reported

• wildfly-deployment-repository

  Version range not reported

• wildfly-deployment-scanner

  Version range not reported

• wildfly-discovery

  Version range not reported

• wildfly-domain-http-interface

  Version range not reported

• wildfly-domain-management

  Version range not reported

• wildfly-elytron-integration

  Version range not reported

• wildfly-elytron-tool-wrapper

  Version range not reported

• wildfly-embedded

  Version range not reported

• wildfly-event-logger

  Version range not reported

• wildfly-host-controller

  Version range not reported

• wildfly-installation-manager

  Version range not reported

• wildfly-io

  Version range not reported

• wildfly-io-spi

  Version range not reported

• wildfly-jar-boot

  Version range not reported

• wildfly-jar-runtime

  Version range not reported

• wildfly-jmx

  Version range not reported

• wildfly-logging

  Version range not reported

• wildfly-management-client-content

  Version range not reported

• wildfly-network

  Version range not reported

• wildfly-patching

  Version range not reported

• wildfly-platform-mbean

  Version range not reported

• wildfly-process-controller

  Version range not reported

• wildfly-protocol

  Version range not reported

• wildfly-remoting

  Version range not reported

• wildfly-request-controller

  Version range not reported

• wildfly-security-manager

  Version range not reported

• wildfly-server

  Version range not reported

• wildfly-service

  Version range not reported

• wildfly-subsystem

  Version range not reported

• wildfly-threads

  Version range not reported

• wildfly-version

  Version range not reported

• wildfly-cli

  Version range not reported

• wildfly-controller

  Version range not reported

• wildfly-controller-client

  Version range not reported

• wildfly-core-feature-pack

  Version range not reported

• wildfly-core-management-client

  Version range not reported

• wildfly-core-management-subsystem

  Version range not reported

• wildfly-core-security

  Version range not reported

• wildfly-core-security-api

  Version range not reported

• wildfly-deployment-repository

  Version range not reported

• wildfly-deployment-scanner

  Version range not reported

• wildfly-discovery

  Version range not reported

• wildfly-domain-http-error-context

  Version range not reported

• wildfly-domain-http-interface

  Version range not reported

• wildfly-domain-management

  Version range not reported

• wildfly-elytron-integration

  Version range not reported

• wildfly-elytron-tool-wrapper

  Version range not reported

• wildfly-embedded

  Version range not reported

• wildfly-event-logger

  Version range not reported

• wildfly-host-controller

  Version range not reported

• wildfly-io

  Version range not reported

• wildfly-jmx

  Version range not reported

• wildfly-launcher

  Version range not reported

• wildfly-logging

  Version range not reported

• wildfly-management-client-content

  Version range not reported

• wildfly-model-test

  Version range not reported

• wildfly-network

  Version range not reported

• wildfly-patching

  Version range not reported

• wildfly-platform-mbean

  Version range not reported

• wildfly-process-controller

  Version range not reported

• wildfly-protocol

  Version range not reported

• wildfly-remoting

  Version range not reported

• wildfly-request-controller

  Version range not reported

• wildfly-security-manager

  Version range not reported

• wildfly-server

  Version range not reported

• wildfly-subsystem-test-framework

  Version range not reported

• wildfly-threads

  Version range not reported

• wildfly-version

  Version range not reported

References 2