Executive brief
Altium Enterprise Server is an on-premise platform used for managing electronic design data and collaboration. A security flaw in the image upload component allows an authenticated user to bypass folder restrictions and write files to any location on the server's hard drive. This could allow an attacker to take full control of the server, steal sensitive design data, or disrupt operations by overwriting critical system files.
Technical details
A path traversal vulnerability exists in the Altium Enterprise Server Vault Service UploadController due to improper validation of user-controlled path components in image upload requests. An authenticated attacker can provide a crafted absolute path that causes the application to discard the intended storage root, enabling arbitrary file writes to any directory accessible by the service account. This primitive can be leveraged for remote code execution (RCE) by writing files to web-accessible directories or overwriting application binaries and configuration files. The vulnerability affects on-premise deployments; Altium 365 cloud deployments are not affected. A fix is available in version 8.0.4.
Affected products
- Altium Enterprise Server All versions prior to 8.0.4
Timeline
- 2026-06-05: advisory: NVD publication date
- 2026-06-05: disclosed