CVE-2026-67970

Name of the Vulnerable Software and Affected Versions NASA cFS version 7.0.1

Description Incorrect access control in the DS SetDestPathCmd() function allows attackers to access sensitive components through path traversal, a technique used to access files or directories outside the intended folder by using special characters like dot-dot-slash (../).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.