What is CVE-2026-66755?
CVE-2026-66755 is a Relative Path Traversal vulnerability in the ISA-Tab parser of Apache Tika, affecting versions 1.8 to 3.3.1 and 4.0.0-alpha-1. It allows an attacker to read arbitrary files accessible to the Tika process by placing a malicious file in a parsed directory. Users should upgrade to a patched version immediately.
Azərbaycanca: CVE-2026-66755 Apache Tika-nın ISA-Tab parserində nisbi yol keçidi zəifliyidir. Bu, təcavüzkara xüsusi hazırlanmış fayl yerləşdirərək Tika prosesinin icazəsi olan ixtiyari faylları oxumağa imkan verir. Təsirə məruz qalan versiyaları işlədən istifadəçilər dərhal son təhlükəsizlik yamasına yeniləməlidir.
Related CVEs
link basis: same weakness class CWE-22
FAQ2
In which component of Apache Tika was CVE-2026-66755 discovered?
CVE-2026-66755 is a Relative Path Traversal vulnerability found in the ISA-Tab parser of Apache Tika.
What can an attacker do by exploiting this vulnerability?
An attacker can read arbitrary files accessible to the Tika process by placing a malicious file.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.