Path Traversal in Apache Software Foundation Tika
CVE-2026-66755
Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and 4.0.0-alpha-1, allows an attacker who can place files in a directory that the application subsequently parses to read arbit…
Vulnerability class: Path Traversal (Directory Traversal)
Affected products
- Apache Software Foundation Tika — versions 1.8, 4.0.0-alpha-1
Weakness classification (CWE)
References
- security@apache.org (vendor-advisory)
- af854a3a-2127-422b-91ae-364da2661108