CVE-2026-60062

Name of the Vulnerable Software and Affected Versions NGINX Agent (affected versions not specified)

Description An issue exists where the config dirs directive allows a remotely authenticated low-privileged attacker to obtain limited read and write access to files located outside of the designated secure directories. This directive can be configured via the NGINX Agent or through NGINX Instance Manager. A successful exploit enables an attacker to cross a security boundary.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.