What is CVE-2026-10621?

CVE-2026-10621 is a high-severity vulnerability in Collibra Platform (On-Prem), classified under CWE-22 IMPROPER LIMITATION OF A PATHNAME TO A RESTRICTED DIRECTORY ('PATH TRAVERSAL'). CVSS score: 7.5/10. Published 2026-06-02.

How severe is CVE-2026-10621?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Collibra Platform (On-Prem)

CVE-2026-10621

Path traversal in restore handler in Collibra Agent, allows an attacker to write arbitrary files via a crafted ZIP archive. Collibra Agent fails to properly validate and canonicalize file path during ZIP extraction, this can allow an attacker to write files outside the intended extraction directory.

Published 2026-06-02 · last modified 2026-07-22.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.

EPSS exploit prediction

EPSS: 0.004 (32.3th percentile), scored 2026-10-07.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 32nd percentile — 32.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.004 · newest: 0.004 · change: 0.000

Affected products

Collibra Platform (On-Prem) — versions 2026.03, 2025.10
Collibra Platform (Saas) — versions 2025.10, 2025.11, 2026.02

References

Frequently asked questions

What is CVE-2026-10621?: CVE-2026-10621 is a high-severity vulnerability in Collibra Platform (On-Prem), classified under CWE-22 IMPROPER LIMITATION OF A PATHNAME TO A RESTRICTED DIRECTORY ('PATH TRAVERSAL'). CVSS score: 7.5/10. Published 2026-06-02.
How severe is CVE-2026-10621?: High severity. CVSS v3 base score is 7.5 out of 10.