CVE-2026-103508
7.3HighPublished 15 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
- Impact
- High impact on integrity, availability
- Weakness
- CWE-23
Impact
Authenticated users with admin privileges on the connected P4 Server can overwrite or delete arbitrary files, potentially executing code as the P4 Search service account. They need network access and administrative credentials on the P4 Server.
Root cause
Improper limitation of a pathname (path traversal) within crafted logging configuration parameters.
Affected systems
P4 Search 2026.4.2 and earlier
CVSS v4.0 · CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Fix & remediation
Upgrade P4 Search to version 2026.4.3. If patching immediately is not possible, restrict administrative privileges on the connected P4 Server to trusted personnel.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
P4 Search (formerly Helix Search) allows an authenticated user holding administrative privileges on the connected P4 Server to supply a crafted logging configuration that causes files to be written or deleted outside the intended logging directory. This could lead to code execution as the P4 Search service account. This issue affects P4 Search 2026.4.2 and earlier. Perforce resolved it in 2026.4.3.