{"id":"CVE-2024-26291","aliases":["EUVD-2024-23562","GHSA-ppfc-qhxq-94wr"],"status":"published","title":"Authenticated Arbitrary File Read affecting Avid NEXIS","description":"An Unauthenticated Arbitrary File Read vulnerability affects the\nAgent when installed on a system. The parameter filename does not validate the\npath thus allowing users to read arbitrary files. As\nthe application runs with the highest privileges (root/NT_AUTHORITY SYSTEM)\nby default attackers are able to obtain sensitive information.\n\nThis issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before 2025.5.1; Avid NEXIS PRO+: before 2025.5.1; System Director Appliance (SDA+): before 2025.5.1.","severity":{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.01162,"percentile":0.67634,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-285"],"published":"2025-07-14T08:12:16Z","modified":"2026-06-17T07:17:33Z","exploits":[{"source":"nuclei","id":"CVE-2024-26291","title":"Avid NEXIS Agent - Arbitrary File Read","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-26291.yaml"}],"products":[{"vendor":"avid","product":"avid nexis e-series"},{"vendor":"avid","product":"avid nexis f-series"},{"vendor":"avid","product":"avid nexis pro+"},{"vendor":"avid","product":"system director appliance (sda+)"}],"references":[{"url":"https://resources.avid.com/SupportFiles/attach/AvidNEXIS/AvidNEXIS_2025_5_1_ReadMe.pdf","tags":["vendor-advisory"]},{"url":"https://raeph123.github.io/BlogPosts/Avid_Nexis/Advisory_Avid_Nexus_Agent_Multiple_Vulnerabilities_en.html","tags":["third-party-advisory","technical-description"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-26291"},{"url":"https://github.com/advisories/GHSA-ppfc-qhxq-94wr"}],"sources":{"cve":[{"id":"CVE-2024-26291","title":"Authenticated Arbitrary File Read affecting Avid NEXIS","description":"An Unauthenticated Arbitrary File Read vulnerability affects the\nAgent when installed on a system. The parameter filename does not validate the\npath thus allowing users to read arbitrary files. As\nthe application runs with the highest privileges (root/NT_AUTHORITY SYSTEM)\nby default attackers are able to obtain sensitive information.\n\nThis issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before 2025.5.1; Avid NEXIS PRO+: before 2025.5.1; System Director Appliance (SDA+): before 2025.5.1.","status":"published","published":"2025-07-14T08:12:16.139Z","modified":"2025-07-14T15:06:09.582Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"high","assessor":"cna"}],"cwes":["CWE-285"],"updated_at":"2026-11-02T14:33:59.884489Z"}],"euvd":[{"id":"EUVD-2024-23562","description":"An Unauthenticated Arbitrary File Read vulnerability affects the\nAgent when installed on a system. The parameter filename does not validate the\npath thus allowing users to read arbitrary files. As\nthe application runs with the highest privileges (root/NT_AUTHORITY SYSTEM)\nby default attackers are able to obtain sensitive information.\n\nThis issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before 2025.5.1; Avid NEXIS PRO+: before 2025.5.1; System Director Appliance (SDA+): before 2025.5.1.","status":"published","published":"2025-07-14T08:12:16Z","modified":"2025-07-14T15:06:09Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T20:32:08.599959Z"}],"ghsa":[{"id":"GHSA-ppfc-qhxq-94wr","title":"The Application is vulnerable to an Unauthenticated Arbitrary File Read. This affects the\nAgent...","description":"The Application is vulnerable to an Unauthenticated Arbitrary File Read. This affects the\nAgent installed on Linux and Windows alike. The parameter filename does not validate the\npath thus allowing users to read arbitrary files. As\nthe application runs with the highest privileges (root/NT_AUTHORITY SYSTEM)\nby default attackers are able to obtain sensitive information.\n\nThis issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before 2025.5.1; Avid NEXIS PRO+: before 2025.5.1; System Director Appliance (SDA+): before 2025.5.1.","status":"published","published":"2025-07-14T09:31:04Z","modified":"2025-07-14T09:31:10Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"cwes":["CWE-285"],"updated_at":"2026-11-02T15:03:00.541352Z"}],"nvd":[{"id":"CVE-2024-26291","description":"An Unauthenticated Arbitrary File Read vulnerability affects the\nAgent when installed on a system. The parameter filename does not validate the\npath thus allowing users to read arbitrary files. As\nthe application runs with the highest privileges (root/NT_AUTHORITY SYSTEM)\nby default attackers are able to obtain sensitive information.\n\nThis issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before 2025.5.1; Avid NEXIS PRO+: before 2025.5.1; System Director Appliance (SDA+): before 2025.5.1.","status":"published","published":"2025-07-14T09:15:23.25Z","modified":"2026-06-17T07:17:33.13Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"}],"cwes":["CWE-285"],"updated_at":"2026-11-02T14:10:47.073504Z"}]}}