Risesoft-y9 Digital-Infrastructure Has High-Severity Unauthenticated Path Traversal Flaw

Risesoft-y9 Digital-Infrastructure contains a high-severity path traversal vulnerability that allows unauthenticated attackers to write arbitrary files to affected systems. The National Vulnerability Database records this flaw as CVE-2026-110116 and assigns it a CVSS score of 8.8, indicating a significant risk to organizations using the software.

Attackers can exploit this vulnerability by sending crafted requests to the fileManager storeFile endpoint. Specifically, manipulating the fullPath and fileName parameters in a POST request to /rest/storeFile enables the creation or overwriting of service-writable files. This capability could potentially lead to remote code execution on the compromised server.

Vulnerability Details and Impact

The vulnerability is classified under CWE-22, which refers to path traversal flaws that allow access to files or directories outside the intended directory. According to the NVD record, the issue exists in the fileManager component of the Digital-Infrastructure platform. The ability to write arbitrary files without authentication bypasses standard access controls, giving attackers a direct vector to plant malicious scripts or overwrite critical configuration files.

As Threat Times reported on 2026-10-12, IBM DataStage on Cloud Pak for Data also faced a critical path traversal flaw allowing denial of service. While that IBM flaw required authenticated attackers, the current Risesoft-y9 issue is more severe because it requires no authentication. This distinction makes the Risesoft-y9 vulnerability easier to exploit at scale, as attackers do not need valid credentials to initiate the attack.

Affected Versions and Scope

The vulnerability affects Risesoft-y9 Digital-Infrastructure versions 9.6.5 through 9.6.11. Any installation running these specific versions is susceptible to the unauthenticated file write attack. The NVD record does not list versions prior to 9.6.5 or later than 9.6.11 as affected, but organizations should verify their exact build numbers to ensure compliance with security standards.

The potential for code execution makes this a high-priority issue for security teams. Overwriting service-writable files can disrupt system integrity or allow persistent backdoors. Organizations relying on Risesoft-y9 for digital infrastructure management must assess their exposure immediately, given the low barrier to entry for attackers exploiting this endpoint.

What should you do?

Security professionals should audit their environments for any instances of Risesoft-y9 Digital-Infrastructure running versions 9.6.5 through 9.6.11. Since no patch or fix has been confirmed yet in the source material, immediate mitigation strategies are necessary. Network segmentation and strict access controls can help limit exposure while a vendor update is awaited.