Executive brief
A vulnerability exists in the OpenDaylight Controller, a platform used for software-defined networking (SDN). An attacker can exploit a flaw in the datastore backup feature to write files to unauthorized locations on the server. This could allow an attacker to disrupt operations, corrupt system data, or potentially gain further control over the networking infrastructure.
Technical details
A path traversal vulnerability exists in the cluster-admin:backup-datastore component of OpenDaylight (ODL) Controller v12.0.5. The flaw stems from insufficient validation of the file-path parameter provided in backup requests. A remote attacker can exploit this by sending a crafted HTTP POST request via the RESTCONF interface containing directory traversal sequences (e.g., ../). Successful exploitation allows the attacker to write arbitrary files to any location on the filesystem accessible by the ODL process. It is recommended to implement strict validation that restricts file paths to a designated base directory.
Affected products
- OpenDaylight Controller 12.0.5
Timeline
- 2026-06-05: disclosed: Vulnerability published to NVD and GitHub repository created.