CVE-2026-61372
HIGH
CVSS 7.5
apache_jena_fuseki
Verified Advisory
Path traversal in Apache Jena Fuseki via SPARQL Update requests (CVE-2026-61372)
A path traversal vulnerability in Apache Jena Fuseki allows web requests using SPARQL Update to escape file restrictions. An attacker may leverage this to access files outside of the intended restricted directory. The issue has been rated as important severity by the Apache Jena project.
Affected versions:
- Apache Jena Fuseki through 6.1.0
We recommend updating to: 6.2.0.
CVSS ? · our assessment: act_now
Reference: https://seclists.org/oss-sec/2026/q3/391
Details: https://vuln.today/cve/CVE-2026-61372
Verified by vuln.today against published advisories.
Affected versions
- – Apache Jena Fuseki through 6.1.0
Fixed in: 6.2.0