Path Traversal in Aehrc Pathling
CVE-2026-47659
Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's `/$result` endpoint allows a caller who can obtain any valid async expo…
Vulnerability class: Path Traversal (Directory Traversal)
Affected products
- Aehrc Pathling — versions < 2.0.0
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)