CVE-2026-104994

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-104994", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "state": "PUBLISHED", "assignerShortName": "mitre", "dateReserved": "2026-10-02T19:52:35.969Z", "datePublished": "2026-10-02T19:52:36.831Z", "dateUpdated": "2026-10-05T17:29:18.653Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "modules": ["Terraform configuration parsing and filesystem functions"], "product": "Trivy", "repo": "https://github.com/aquasecurity/trivy", "vendor": "aquasec", "versions": [{"lessThan": "0.71.0", "status": "affected", "version": "0", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "value": "Trivy before 0.71.0 allows directory traversal in Terraform filesystem functions when they try to access pathnames above the scan root. The risk occurs when using misconf scanning on untrusted input (e.g., upon a third-party pull request that contains a Terraform configuration), if sensitive data can be found at those unintended pathnames, and an adversary can then view a sensitive data value within scan output."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 2.5, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-24", "description": "CWE-24 Path Traversal: '../filedir'", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-10-02T19:52:36.831Z"}, "references": [{"url": "https://github.com/aquasecurity/trivy/security/advisories/GHSA-87hp-4m93-274g"}, {"url": "https://github.com/aquasecurity/trivy/commit/9d91b888cf63023e9c09b64259a4c1cea8dfe993"}, {"url": "https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md"}, {"url": "https://github.com/aquasecurity/trivy/pull/10664"}], "x_generator": {"engine": "CVE-Request-form 0.0.1"}, "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:aquasec:trivy:*:*:*:*:*:*:*:*", "versionEndExcluding": "0.71.0"}]}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-05T17:27:47.616968Z", "id": "CVE-2026-104994", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-05T17:29:18.653Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-104994", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-05T17:27:47.616968Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-05T17:29:14.515Z"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 2.5, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"repo": "https://github.com/aquasecurity/trivy", "vendor": "aquasec", "modules": ["Terraform configuration parsing and filesystem functions"], "product": "Trivy", "versions": [{"status": "affected", "version": "0", "lessThan": "0.71.0", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://github.com/aquasecurity/trivy/security/advisories/GHSA-87hp-4m93-274g"}, {"url": "https://github.com/aquasecurity/trivy/commit/9d91b888cf63023e9c09b64259a4c1cea8dfe993"}, {"url": "https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md"}, {"url": "https://github.com/aquasecurity/trivy/pull/10664"}], "x_generator": {"engine": "CVE-Request-form 0.0.1"}, "descriptions": [{"lang": "en", "value": "Trivy before 0.71.0 allows directory traversal in Terraform filesystem functions when they try to access pathnames above the scan root. The risk occurs when using misconf scanning on untrusted input (e.g., upon a third-party pull request that contains a Terraform configuration), if sensitive data can be found at those unintended pathnames, and an adversary can then view a sensitive data value within scan output."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-24", "description": "CWE-24 Path Traversal: '../filedir'"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:aquasec:trivy:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "0.71.0"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-10-02T19:52:36.831Z"}}}, "cveMetadata": {"cveId": "CVE-2026-104994", "state": "PUBLISHED", "dateUpdated": "2026-10-05T17:29:18.653Z", "dateReserved": "2026-10-02T19:52:35.969Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2026-10-02T19:52:36.831Z", "assignerShortName": "mitre"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "modules": ["Terraform configuration parsing and filesystem functions"], "product": "Trivy", "repo": "https://github.com/aquasecurity/trivy", "vendor": "aquasec", "versions": [{"lessThan": "0.71.0", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "cve@mitre.org"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Trivy before 0.71.0 allows directory traversal in Terraform filesystem functions when they try to access pathnames above the scan root. The risk occurs when using misconf scanning on untrusted input (e.g., upon a third-party pull request that contains a Terraform configuration), if sensitive data can be found at those unintended pathnames, and an adversary can then view a sensitive data value within scan output."}], "id": "CVE-2026-104994", "lastModified": "2026-10-05T18:17:33.730", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 2.5, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.0, "impactScore": 1.4, "source": "cve@mitre.org", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-104994", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-10-05T17:27:47.616968Z", "version": "2.0.3"}}]}, "published": "2026-10-02T20:17:01.663", "references": [{"source": "cve@mitre.org", "url": "https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md"}, {"source": "cve@mitre.org", "url": "https://github.com/aquasecurity/trivy/commit/9d91b888cf63023e9c09b64259a4c1cea8dfe993"}, {"source": "cve@mitre.org", "url": "https://github.com/aquasecurity/trivy/pull/10664"}, {"source": "cve@mitre.org", "url": "https://github.com/aquasecurity/trivy/security/advisories/GHSA-87hp-4m93-274g"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-24"}], "source": "cve@mitre.org", "type": "Secondary"}]}

{"bugzilla": {"description": "github.com/aquasecurity/trivy: Trivy: Information disclosure via directory traversal in Terraform filesystem functions", "id": "2545329", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545329"}, "csaw": false, "cvss3": {"cvss3_base_score": "2.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N", "status": "draft"}, "cwe": "CWE-22", "details": ["Trivy before 0.71.0 allows directory traversal in Terraform filesystem functions when they try to access pathnames above the scan root. The risk occurs when using misconf scanning on untrusted input (e.g., upon a third-party pull request that contains a Terraform configuration), if sensitive data can be found at those unintended pathnames, and an adversary can then view a sensitive data value within scan output.", "A flaw was found in Trivy. This vulnerability allows information disclosure when scanning untrusted Terraform configuration files for misconfigurations. An attacker can craft a configuration that uses filesystem functions to reference pathnames outside the designated scan root directory. This directory traversal enables Trivy to read unauthorized files on the host system and potentially expose sensitive data within the scan output."], "mitigation": {"lang": "en:us", "value": "Run Trivy in an ephemeral, unprivileged container or sandbox when scanning untrusted Terraform configurations. Avoid mounting sensitive host paths or exposing credentials via environment variables in the scanner's execution environment. Alternatively, inspect third-party pull requests before running misconfiguration scans against them."}, "name": "CVE-2026-104994", "package_state": [{"cpe": "cpe:/a:redhat:hummingbird:1", "fix_state": "Affected", "package_name": "trivy", "product_name": "Red Hat Hardened Images"}], "public_date": "2026-10-02T19:52:36Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-104994\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-104994\nhttps://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md\nhttps://github.com/aquasecurity/trivy/commit/9d91b888cf63023e9c09b64259a4c1cea8dfe993\nhttps://github.com/aquasecurity/trivy/pull/10664\nhttps://github.com/aquasecurity/trivy/security/advisories/GHSA-87hp-4m93-274g"], "statement": "This vulnerability is classified as Low severity because exploitation requires Trivy to scan untrusted Terraform configurations with misconfiguration scanning enabled, and information disclosure is limited to files readable by the scanner process. Trivy typically runs in ephemeral CI/CD environments or as a local CLI tool under non-privileged accounts, limiting the blast radius. Standard container image scanning workflows are not affected.", "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,0.71.0)"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Trivy", "source": "cna", "vendor": "aquasec"}, "product": "trivy", "vendor": "aquasec"}], "created": "2026-10-02T21:30:17.923772+00:00", "updated": "2026-10-09T02:15:20.382515+00:00", "vendors": ["aquasec", "aquasec$PRODUCT$trivy"]}