{"id":"CVE-2026-105727","published":"2026-10-13T19:18:00.770","lastModified":"2026-10-13T22:17:29.887","description":"Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-22"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105727","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This CVE describes a path traversal vulnerability in Dynamics Business Central that allows authenticated attackers to escape restricted directories and potentially elevate privileges across the network. The flaw stems from improper limitation of file paths, enabling attackers to access unauthorized resources.","exploitability":"Exploitation requires an authenticated user account with access to Business Central, making it moderately difficult but achievable through social engineering or credential compromise, with no additional preconditions beyond initial access.","blast_radius":"If exploited, this vulnerability could allow attackers to gain elevated privileges across the entire Dynamics Business Central environment, potentially leading to unauthorized data access, modification, or system compromise affecting multiple users and business processes.","remediation":"No fixed version is published in the description; disable the affected file path traversal functionality or restrict access to Business Central endpoints that handle file operations until a patch is available.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["path-traversal","privilege-escalation","business-central"],"model":"garnet-coder","analyzedAt":"2026-10-17T08:54:41.554Z"}}