# CVE-2026-110115: Risesoft Digital-Infrastructure path traversal in file manager

Source: https://junglewise.ai/threats/cve-2026-110115-risesoft-digital-infrastructure-9-6-5-through-9-6-11-contains-a  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-13. Updated: 2026-10-16  
License: CC BY 4.0 with a link back

CVE-2026-110115 · Severity: high · CVSS 7.5 · Published 2026-10-13

Risesoft Digital-Infrastructure is an infrastructure management platform whose file manager service handles file uploads and downloads. An unauthenticated remote attacker can read or write arbitrary files on the system by exploiting a path traversal vulnerability in the file manager controller, potentially exposing database credentials or achieving code execution.

Technologies: [Risesoft Digital-Infrastructure](https://junglewise.ai/threats/technologies/digital-infrastructure). Vendors: [Risesoft](https://junglewise.ai/threats/vendors/risesoft).

## Quick answers

**Is CVE-2026-110115 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-110115 being exploited in the wild.

**How severe is CVE-2026-110115?** High severity, with a CVSS score of 7.5, published 13 October 2026.

**Which products and versions are affected?** Risesoft Digital-Infrastructure 9.6.5 through 9.6.11.

**Is there a fix for CVE-2026-110115?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-110115 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-110115?** Check whether you run Risesoft Digital-Infrastructure at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The Y9FileController in the file manager microservice builds filesystem paths via string concatenation of a configured root directory with user-supplied fullPath and fileName parameters without normalization or containment checking, allowing parent-directory traversal (CWE-22). The service declares no authentication mechanism, making the /rest/retrieveFileStream and /rest/storeFile endpoints reachable by unauthenticated attackers. An attacker can read arbitrary files the process can open (including application.yml with database and Redis credentials) or write files to arbitrary paths, potentially leading to code execution.

## Affected products

- Risesoft Digital-Infrastructure 9.6.5 through 9.6.11

## Timeline

- 2026-10-13: disclosed

## References

- [https://github.com/risesoft-y9/Digital-Infrastructure/blob/v9.6.11/y9-digitalbase-module/y9-module-filemanager/risenet-y9boot-webapp-filemanager/src/main/java/net/risesoft/y9public/controller/Y9FileController.java](https://github.com/risesoft-y9/Digital-Infrastructure/blob/v9.6.11/y9-digitalbase-module/y9-module-filemanager/risenet-y9boot-webapp-filemanager/src/main/java/net/risesoft/y9public/controller/Y9FileController.java)
- [https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/digital-infrastructure-filemanager-path-traversal-rw](https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/digital-infrastructure-filemanager-path-traversal-rw)

## Related threats

- [Risesoft Digital-Infrastructure missing authorization in log DownloadController](https://junglewise.ai/threats/cve-2026-111651-risesoft-digital-infrastructure-through-9-6-11-contains-a)
- [Risesoft-y9 Digital-Infrastructure path traversal in fileManager](https://junglewise.ai/threats/cve-2026-110116-risesoft-y9-digital-infrastructure-9-6-5-through-9-6-11-contains)
- [Digital-Infrastructure SSO authentication bypass](https://junglewise.ai/threats/cve-2026-79576-digital-infrastructure-sso-authentication-bypass)