Path traversal in restore handler in Collibra Agent, allows an attacker to write arbitrary files via a crafted ZIP archive. Collibra Agent fails to properly validate and canonicalize file path during ZIP extraction, this can allow an attacker to write files outside the intended extraction directory.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Collibra Platform (SaaS)
Vendor
Collibra
Product
Collibra Platform (SaaS)
Platforms
Unknown
Default status
Unknown
Collibra Platform (SaaS) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2025.10
affected
custom
2025.10.9
Unavailable
None listed
Collibra Platform (SaaS)
Vendor
Collibra
Product
Collibra Platform (SaaS)
Platforms
Unknown
Default status
Unknown
Collibra Platform (SaaS) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2025.11
affected
custom
2025.11.7
Unavailable
None listed
Collibra Platform (SaaS)
Vendor
Collibra
Product
Collibra Platform (SaaS)
Platforms
Unknown
Default status
Unknown
Collibra Platform (SaaS) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2026.02
affected
custom
2026.02.6
Unavailable
None listed
Collibra Platform (SaaS)
Vendor
Collibra
Product
Collibra Platform (SaaS)
Platforms
Unknown
Default status
Unknown
Collibra Platform (SaaS) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2026.03
affected
custom
2026.03.4
Unavailable
None listed
Collibra Platform (SaaS)
Vendor
Collibra
Product
Collibra Platform (SaaS)
Platforms
Unknown
Default status
Unknown
Collibra Platform (SaaS) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2026.04
affected
custom
2024.04.5
Unavailable
None listed
Collibra Platform (on-prem)
Vendor
Collibra
Product
Collibra Platform (on-prem)
Platforms
Unknown
Default status
Unknown
Collibra Platform (on-prem) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2026.03
affected
custom
2026.03.356
Unavailable
None listed
Collibra Platform (on-prem)
Vendor
Collibra
Product
Collibra Platform (on-prem)
Platforms
Unknown
Default status
Unknown
Collibra Platform (on-prem) · Scoped product and version facts