EUVD-2026-40417
GHSA-998c-fcv7-9f2w
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Unauthenticated remote read of worklist files (AV:N/AC:L/PR:N/UI:N, C:H); the disclosure-only nature means no integrity or availability impact, unlike the source vector's VI:L.
Primary rating from Vendor (icscert).
CVSS VectorVendor: icscert
Lifecycle Timeline
1DescriptionCVE.org
An unauthenticated attacker can read worklist records from a directory outside the intended per-AE worklist storage area. In a multi-area deployment, this can cross departmental or clinic data separation.
AnalysisAI
Path traversal in OFFIS DCMTK DICOM toolkit lets an unauthenticated network attacker read DICOM Modality Worklist records stored outside the intended per-Application-Entity (AE) directory. In multi-area or multi-tenant deployments this breaks departmental and clinic-level data separation, exposing patient scheduling and demographic data across boundaries; the issue was disclosed through CISA's ICS Medical advisory ICSMA-26-181-01 with no public exploit identified at time of analysis.
Technical ContextAI
DCMTK is OFFIS's widely-used open-source C++ implementation of the DICOM standard, including the Modality Worklist (MWL) SCP service (wlmscpfs and related components) that serves worklist files from a per-AE-titled directory on disk. The root cause is CWE-22 (Improper Limitation of a Pathname to a Restricted Directory / Path Traversal): user- or association-controlled input used to locate worklist records is not properly canonicalized or constrained, so directory-traversal sequences resolve to files outside the configured per-AE worklist storage area. Because worklist storage in multi-area medical deployments is partitioned by AE to enforce departmental/clinic data separation, traversal collapses that logical isolation. The affected CPE is cpe:2.3:a:offis_dicom:dcmtk_toolkit:*:*:*:*:*:*:*:* (all versions per the listing).
RemediationAI
Upgrade to the fixed DCMTK release identified in CISA advisory ICSMA-26-181-01 (https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-181-01); the references point to the DCMTK GitHub releases page (https://github.com/DCMTK/dcmtk/releases/tag/latest) rather than a specific tagged version, so the upstream fix is available but the exact released patched version is not independently confirmed from the provided data - verify the precise fixed version against the advisory before deploying. Until patched, restrict network reachability of the worklist SCP (wlmscpfs) by firewalling or ACL-limiting the DICOM listening port to only known, trusted modalities and PACS hosts rather than exposing it broadly (trade-off: any legitimate modality not on the allowlist will fail to query worklists); enforce per-AE access controls and place each AE's worklist storage on isolated paths with least-privilege filesystem permissions so traversal cannot reach other areas (trade-off: operational reconfiguration of storage layout); and monitor worklist query logs for anomalous or traversal-style requests. Avoid running the worklist service with broad filesystem read access to unrelated areas.
More in Dcmtk Toolkit
View allPath traversal in OFFIS DCMTK (DICOM Toolkit) lets a malicious or compromised DICOM server write attacker-controlled fil
Denial of service in OFFIS DCMTK's DICOM worklist server (wlmscpfs) allows a remote, unauthenticated attacker to crash t
Denial of service in OFFIS DCMTK's storescp DICOM receiver allows an unauthenticated remote attacker to exhaust process
Denial of service in OFFIS DCMTK DICOM toolkit allows an unauthenticated remote attacker to exhaust memory by repeatedly
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allVendor StatusVendor
SUSE
Severity: ImportantShare
External POC / Exploit Code
Leaving vuln.today