High severity · published Oct 15, 2026
CVE-2026-103509
Credential Disclosure in P4 Search Configuration API
8.5
CVSS
0.2%
EPSS
No
On KEV
Description
P4 Search (formerly Helix Search) returns stored credentials in cleartext through its configuration API to users with administrative privileges on the connected P4 Server, allowing privilege escalation.
This affects 2026.4.2 and earlier and is fixed in 2026.4.3.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 14% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PH
P4 (Helix core) · Perforce
through 2026.4.3 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-103509
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-103509
portal.perforce.com
https://portal.perforce.com/s/cve/a91Qi000003Gdi1IAC/credential-disclosure-in-p4-search-configuration-api
More from P4 (Helix core)
9.5
CVE-2026-103510
Authentication bypass via blank auth token in P4Search
9.5
CVE-2026-100102
RCE via exposed JDWP debug agent in P4Search
7.7
CVE-2026-6902
Code Injection in Perforce P4 (Helix Core)
7.5
CVE-2026-103507
Arbitrary file-write via log configuration path in P4Search
7.3
CVE-2026-103508
Path traversal via logging configuration in P4Search