CVE-2026-84823
7.1HighPublished 16 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
- Impact
- High impact on confidentiality
- Weakness
- CWE-22
Impact
An authenticated user with the low-privilege Monitor role can read sensitive server configuration files and credentials. They need network access to the WildFly management interface and valid Monitor-level credentials.
Root cause
A path traversal flaw in the take-snapshot operation's name parameter permits writing configuration snapshots to arbitrary locations accessible for readback.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Fix & remediation
Upgrade WildFly to the patched version referenced in Red Hat advisory CVE-2026-84823 once available. As a temporary workaround, revoke take-snapshot permissions or access to the management interface for accounts assigned the Monitor role.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A flaw was found in WildFly. A user with the `Monitor` role, which is the lowest standard Role-Based Access Control (RBAC) role, can exploit a path traversal vulnerability in the `take-snapshot` operation. By manipulating the `name` parameter, this user can write a copy of the server configuration to an arbitrary location. This allows the `Monitor` role to read back the server configuration, including sensitive credentials, which would otherwise be restricted by RBAC, leading to information disclosure.