As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-78254: Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CVE-2026-78254: Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write
Apache Ant versions before 1.10.18 contain a path traversal vulnerability in the ftp and scp tasks that allows a malicious remote server to write files outside the intended target directory. An attacker can exploit this to overwrite arbitrary files with the permissions of the user running Ant.
Why it matters: Teams using Apache Ant 1.2 through 1.10.17 for build automation or file transfer tasks face arbitrary file overwrite risk when connecting to untrusted or compromised servers; update to 1.10.18 or later immediately.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CVE-2026-78254: Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write
Apache Ant versions before 1.10.18 contain a path traversal vulnerability in the ftp and scp tasks that allows a malicious remote server to write files outside the intended target directory. An attacker can exploit this to overwrite arbitrary files with the permissions of the user running Ant.
Why it matters: Teams using Apache Ant 1.2 through 1.10.17 for build automation or file transfer tasks face arbitrary file overwrite risk when connecting to untrusted or compromised servers; update to 1.10.18 or later immediately.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CVE-2026-78254: Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write
CVE-2026-78254 affects Apache Ant versions 1.2 through 1.10.17, where the ftp and scp tasks can be exploited by a malicious server to write files outside the intended target directory using relative paths. This path traversal vulnerability allows an attacker to overwrite arbitrary files with the permissions of the user running Ant.
Why it matters: Teams using Apache Ant for build automation or file transfers are exposed if they connect to untrusted or compromised servers; update to version 1.10.18 or later to remediate.
- Source published
- First seen by Cybersecurity Tracker