High severity · published Oct 15, 2026
CVE-2026-103508
Path traversal via logging configuration in P4Search
7.3
CVSS
0.4%
EPSS
No
On KEV
Description
P4 Search (formerly Helix Search) allows an authenticated user holding administrative privileges on the connected P4 Server to supply a crafted logging configuration that causes files to be written or deleted outside the intended logging directory. This could lead to code execution as the P4 Search service account. This issue affects P4 Search 2026.4.2 and earlier.
Perforce resolved it in 2026.4.3.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 36% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PH
P4 (Helix core) · Perforce
through 2026.4.2 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-103508
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-103508
portal.perforce.com
https://portal.perforce.com/s/cve/a91Qi000003GdOfIAK/path-traversal-via-logging-configuration-in-p4search
More from P4 (Helix core)
9.5
CVE-2026-103510
Authentication bypass via blank auth token in P4Search
9.5
CVE-2026-100102
RCE via exposed JDWP debug agent in P4Search
8.5
CVE-2026-103509
Credential Disclosure in P4 Search Configuration API
7.7
CVE-2026-6902
Code Injection in Perforce P4 (Helix Core)
7.5
CVE-2026-103507
Arbitrary file-write via log configuration path in P4Search