CVE-2026-9108

EUVD-2026-43707

14.07.2026, 16:17

A path traversal security issue exists within Studio 5000 Logix Designer® due to improper limitation of file paths within ACD project files. The software does not sanitize or validate file names embedded in the ACD file structure during the project opening procedure, allowing path traversal sequences to escape the intended extraction directory. If exploited, an attacker could craft a malicious ACD project file that results in arbitrary files being written to attacker-controlled locations on the file system, potentially leading to code execution.

Path Traversal

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.5 HIGH	LOCAL	HIGH	LOW	CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 3.71%

Affected Products (NVD)

Vendor	Product	Version
rockwellautomation	studio_5000_logix_designer	𝑥 < 32.05
rockwellautomation	studio_5000_logix_designer	33.00 ≤ 𝑥 < 33.04
rockwellautomation	studio_5000_logix_designer	34.00 ≤ 𝑥 < 34.04
rockwellautomation	studio_5000_logix_designer	35.00 ≤ 𝑥 < 35.02
rockwellautomation	studio_5000_logix_designer	36.00

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1783.html