Skip to content
OpenAdvisories
High · 7.5 CVE-2026-1616 EUVD-2026-4986GHSA-4mf9-4xp5-f638

osim: Path Traversal via query parameters in Nginx configuration

Published Jan 29, 2026 · Updated Jan 29, 2026 · Assigned by redhat-cnalr

Description

The $uri$args concatenation in nginx configuration file present in Open Security Issue Management (OSIM) prior v2025.9.0 allows path traversal attacks via query parameters.

Affected products

VendorProductAffectedFixed
Red Hat osim < v2025.9.0 v2025.9.0

References