CVE-2026-17614

A path traversal flaw was found in WildFly&amp;#39;s domain mode<br /> implementation. The LocalFileRepository.getFile() and<br /> getConfigurationFile() methods in<br /> wildfly-core/deployment-repository do not validate that the<br /> resolved file path remains within the configured repository or<br /> configuration root directories. A remote attacker who has<br /> obtained the slave host controller secret or compromised a slave<br /> host controller can supply a crafted relative path containing<br /> directory traversal sequences (e.g., ../../etc/passwd) via the<br /> slave-DC wire protocol, causing the Domain Controller to resolve<br /> and serve arbitrary files readable by the DC process. This leads<br /> to unauthorized disclosure of sensitive information such as<br /> configuration files, keystores, and system credentials.