CVE-2026-1616 - Vulnerability Details - OpenCVE

The $uri$args concatenation in nginx configuration file present in Open Security Issue Management (OSIM) prior v2025.9.0 allows path traversal attacks via query parameters.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Redhat	Osim

No data.

No data.

References

Link	Providers
https://github.com/RedHatProductSecurity/osim/pull/615

History

Fri, 30 Jan 2026 09:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Redhat Redhat osim
Vendors & Products		Redhat Redhat osim

Thu, 29 Jan 2026 17:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Thu, 29 Jan 2026 14:15:00 +0000

Type	Values Removed	Values Added
Description		The $uri$args concatenation in nginx configuration file present in Open Security Issue Management (OSIM) prior v2025.9.0 allows path traversal attacks via query parameters.
Title		osim: Path Traversal via query parameters in Nginx configuration
Weaknesses		CWE-22
References		https://github.com/RedHatProductSecurity/osim/pull/615
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}`

MITRE

Status: PUBLISHED

Assigner: redhat-cnalr

Published: 2026-01-29T13:38:35.932Z

Updated: 2026-01-29T16:44:01.819Z

Reserved: 2026-01-29T13:25:57.791Z

Link: CVE-2026-1616

Vulnrichment

Updated: 2026-01-29T15:56:27.067Z

NVD

Status : Awaiting Analysis

Published: 2026-01-29T14:16:13.457

Modified: 2026-01-29T16:31:00.867

Link: CVE-2026-1616

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-1616", "assignerOrgId": "74b3a70d-cca6-4d34-9789-e83b222ae3be", "state": "PUBLISHED", "assignerShortName": "redhat-cnalr", "dateReserved": "2026-01-29T13:25:57.791Z", "datePublished": "2026-01-29T13:38:35.932Z", "dateUpdated": "2026-01-29T16:44:01.819Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://github.com/RedHatProductSecurity/osim", "defaultStatus": "unaffected", "packageName": "osim", "product": "osim", "repo": "https://github.com/RedHatProductSecurity/osim", "vendor": "Red Hat", "versions": [{"lessThan": "v2025.9.0", "status": "affected", "version": "0", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "reporter", "value": "Moritz Oehrlein (m1tz)"}], "datePublic": "2025-09-02T13:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>The $uri$args concatenation in nginx configuration file present in Open Security Issue Management (OSIM) prior v2025.9.0 allows path traversal attacks via query parameters.</p>"}], "value": "The $uri$args concatenation in nginx configuration file present in Open Security Issue Management (OSIM) prior v2025.9.0 allows path traversal attacks via query parameters."}], "impacts": [{"capecId": "CAPEC-126", "descriptions": [{"lang": "en", "value": "CAPEC-126 Path Traversal"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-22", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "74b3a70d-cca6-4d34-9789-e83b222ae3be", "shortName": "redhat-cnalr", "dateUpdated": "2026-01-29T13:38:35.932Z"}, "references": [{"url": "https://github.com/RedHatProductSecurity/osim/pull/615"}], "source": {"discovery": "UNKNOWN"}, "title": "osim: Path Traversal via query parameters in Nginx configuration", "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-01-29T15:56:24.185454Z", "id": "CVE-2026-1616", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-29T16:44:01.819Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-1616", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-01-29T15:56:24.185454Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-29T15:56:27.067Z"}}], "cna": {"title": "osim: Path Traversal via query parameters in Nginx configuration", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "reporter", "value": "Moritz Oehrlein (m1tz)"}], "impacts": [{"capecId": "CAPEC-126", "descriptions": [{"lang": "en", "value": "CAPEC-126 Path Traversal"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"repo": "https://github.com/RedHatProductSecurity/osim", "vendor": "Red Hat", "product": "osim", "versions": [{"status": "affected", "version": "0", "lessThan": "v2025.9.0", "versionType": "custom"}], "packageName": "osim", "collectionURL": "https://github.com/RedHatProductSecurity/osim", "defaultStatus": "unaffected"}], "datePublic": "2025-09-02T13:00:00.000Z", "references": [{"url": "https://github.com/RedHatProductSecurity/osim/pull/615"}], "x_generator": {"engine": "Vulnogram 0.5.0"}, "descriptions": [{"lang": "en", "value": "The $uri$args concatenation in nginx configuration file present in Open Security Issue Management (OSIM) prior v2025.9.0 allows path traversal attacks via query parameters.", "supportingMedia": [{"type": "text/html", "value": "<p>The $uri$args concatenation in nginx configuration file present in Open Security Issue Management (OSIM) prior v2025.9.0 allows path traversal attacks via query parameters.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}], "providerMetadata": {"orgId": "74b3a70d-cca6-4d34-9789-e83b222ae3be", "shortName": "redhat-cnalr", "dateUpdated": "2026-01-29T13:38:35.932Z"}}}, "cveMetadata": {"cveId": "CVE-2026-1616", "state": "PUBLISHED", "dateUpdated": "2026-01-29T16:44:01.819Z", "dateReserved": "2026-01-29T13:25:57.791Z", "assignerOrgId": "74b3a70d-cca6-4d34-9789-e83b222ae3be", "datePublished": "2026-01-29T13:38:35.932Z", "assignerShortName": "redhat-cnalr"}, "dataVersion": "5.2"}