As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-78254: Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CVE-2026-78254: Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write
Apache Ant versions before 1.10.18 contain a path traversal vulnerability in the ftp and scp tasks that allows a malicious remote server to write files outside the intended target directory. An attacker can exploit this to overwrite arbitrary files with the permissions of the user running Ant.
Why it matters: Teams using Apache Ant 1.2 through 1.10.17 for build automation or file transfer tasks face arbitrary file overwrite risk when connecting to untrusted or compromised servers; update to 1.10.18 or later immediately.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CVE-2026-78254: Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write
Apache Ant versions before 1.10.18 contain a path traversal vulnerability in the ftp and scp tasks that allows a malicious remote server to write files outside the intended target directory. An attacker can exploit this to overwrite arbitrary files with the permissions of the user running Ant.
Why it matters: Teams using Apache Ant 1.2 through 1.10.17 for build automation or file transfer tasks face arbitrary file overwrite risk when connecting to untrusted or compromised servers; update to 1.10.18 or later immediately.
- Source published
- First seen by Cybersecurity Tracker