CVE-2026-1616

osim: Path Traversal via query parameters in Nginx configuration PUBLISHED

Description (CNA)

The $uri$args concatenation in nginx configuration file present in Open Security Issue Management (OSIM) prior v2025.9.0 allows path traversal attacks via query parameters.

Affected (CNA)

Vendor / product	Versions
Red Hat / osim	affected 0 before v2025.9.0

CWE

CWE-22

References

https://github.com/RedHatProductSecurity/osim/pull/615

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.