CVE-2026-11429

Name of the Vulnerable Software and Affected Versions Altium Enterprise Server versions prior to 8.1.1 Altium 365 (affected versions not specified)

Description A path traversal issue exists in the Git Service component shared by Altium Enterprise Server and Altium 365. The service processes post-clone file-manipulation operations using user-supplied paths without proper validation. This allows an authenticated user with basic git access to move arbitrary files outside the designated repository area. This capability can be used to place malicious script content into directories where the service later executes them, leading to remote code execution under the Git Service account. In multi-tenant Altium 365 deployments, this could enable unauthorized access to data from other tenants on the same infrastructure node.

Recommendations Update Altium Enterprise Server to version 8.1.1.