CVE-2026-46724

Name of the Vulnerable Software and Affected Versions Faceted Search (ke search) (affected versions not specified)

Description The file indexer fails to normalize the configured directory path. This allows a backend user with permissions to edit indexer configurations to index documents from arbitrary locations on the server file system by using path traversal sequences, which are characters used to navigate through the directory hierarchy to access files outside the intended folder.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.