Path Traversal in Altium 365
CVE-2026-11431
A path traversal vulnerability exists in the Projects Service download endpoint shared by Altium Enterprise Server and Altium 365. An authenticated user can supply a crafted path parameter that bypasses validation, allowing arbitrary files…
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.005 (40.6th percentile) — read the EPSS interpretation.
Affected products
- Altium 365 — versions unspecified
- Altium Enterprise Server — versions 0