CVE-2026-103507

UNKNOWN 0.0

Arbitrary file-write via log configuration path in P4Search

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Perforce P4 Search prior to 2026.4.2 does not restrict file paths written through its logging configuration interface. An attacker holding the service authentication token can write arbitrary files on the host, potentially leading to code execution as the P4 Search service account.

CWE	CWE-73
Vendor	perforce
Product	p4 (helix core)
Published	Oct 5, 2026

Stay Ahead of the Next One

Get instant alerts for perforce p4 (helix core)

Be the first to know when new unknown vulnerabilities affecting perforce p4 (helix core) are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Perforce / P4 (Helix Core)

0 ≤ 2026.4.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

portal.perforce.com: https://portal.perforce.com/s/cve/a91Qi000003FE49IAG/arbitrary-filewrite-via-log-configuration-path-in-p4search

Credits

Khoa Bui (https://github.com/zenniskayy2k4)