CVE-2026-103507
P4 (Helix Core): Arbitrary file-write via log configuration path in P4Search
Perforce P4 (Helix Core)
CVSS
7.5HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.51%Chance of exploitation activity in the next 30 days, higher than 42% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version yet
What fixes it
No source in this snapshot names a fixed version.
Description
Perforce P4 Search prior to 2026.4.2 does not restrict file paths written through its logging configuration interface. An attacker holding the service authentication token can write arbitrary files on the host, potentially leading to code execution as the P4 Search service account.
Text from CVE List
Affected versions 2
- P4 (Helix Core)affected: all versions through 2026.4.1CVE List
- P4 (Helix Core)unaffected: 2026.4.2CVE List