CyberRota Analysis
AI-GeneratedPerforce P4 Search versions prior to 2026.4.2 are vulnerable due to inadequate restrictions on file paths in their logging configuration interface, allowing an authenticated attacker to write arbitrary files on the host system. This could lead to potential code execution under the privileges of the P4 Search service account. Organizations using affected versions should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Perforce P4 Search prior to 2026.4.2 does not restrict file paths written through its logging configuration interface. An attacker holding the service authentication token can write arbitrary files on the host, potentially leading to code execution as the P4 Search service account.