CVE-2026-9108

Name of the Vulnerable Software and Affected Versions Studio 5000 Logix Designer (affected versions not specified)

Description A path traversal issue exists due to improper limitation of file paths within ACD project files. The software fails to sanitize or validate file names embedded in the ACD file structure during the project opening procedure, which allows path traversal sequences to escape the intended extraction directory. An attacker could craft a malicious ACD project file to write arbitrary files to controlled locations on the file system, potentially leading to arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.