Unrated severityNVD Advisory· Published Jul 3, 2026· Updated Jul 6, 2026
Apache Lucene.Net: Arbitrary file write from malicious server to Lucene.Net.Replicator client
CVE-2026-47897
Description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Lucene.Net (Lucene.Net.Replicator library).
This issue affects Apache Lucene.Net.Replicator: from 4.8.0-beta00005 before 4.8.0-beta00018.
Users are recommended to upgrade to version 4.8.0-beta00018, which fixes the issue.
Patches
Vulnerability mechanics
References
1- lists.apache.org/thread/on1j3zmvgtf8n9fw78z3lyf6dn94p5zcmitrevendor-advisory
News mentions
0No linked articles in our index yet.