CVE-2024-11944 HIGH

CVE-2024-11944: iXsystems TrueNAS CORE tarfile.extractall Directory Traversal Remote Code Execution Vulnerability

Vendor Ixsystems
Product TrueNAS CORE
Weakness CWE-22 · Path traversal
Published December 30, 2024
Last update December 30, 2024
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Adjacent
Attack complexity High
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

iXsystems TrueNAS CORE tarfile.extractall Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of iXsystems TrueNAS devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the tarfile.extractall method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root. Was ZDI-CAN-25626.

Key dates

02Disclosure timeline

December 30, 2024 CVE published
December 30, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-33656 EspoCRM vulnerable to authenticated RCE via Formula with path traversal in attachment `sourceId`, exploitable by admin user CVE-2026-40611 Lego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider CVE-2025-61923 PrestaShop Checkout Backoffice directory traversal allows arbitrary file disclosure CVE-2022-47501 Apache OFBiz: Arbitrary file reading vulnerability CVE-2026-23954 Incus container image templating arbitrary host file read and write