PT-2026-45745 · Collibra · Collibra Agent

CVE-2026-10621 · Published 2026-06-02 · Updated 2026-06-02

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Collibra Agent (affected versions not specified)

Description A path traversal issue exists in the restore handler. The software fails to properly validate and canonicalize file paths during the extraction of ZIP archives, which allows an attacker to write arbitrary files outside the intended extraction directory using a crafted ZIP archive.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-10621

Affected Products

Collibra Agent

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-10621 · Security Note
• https://kb.cert.org/vuls/id/873170 · Note
• https://twitter.com/VulmonFeeds/status/2061890194270191656 · Twitter Post
• https://collibra.com · Note
• https://t.me/CVEtracker/55600 · Telegram Post