Perforce P4 vulnerabilities

CVE-2026-103510 [CRITICAL] CWE-636 CVE-2026-103510: P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. I P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. In affected configurations, an unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to compromise of P4 Search and the connected P4 Server.

CVE-2026-100102 [CRITICAL] CWE-489 CVE-2026-100102: Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug interface Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug interface. An attacker with network access to this interface can execute arbitrary code as the P4 Search service account, potentially leading to compromise of the connected P4 Server.

CVE-2026-103507 [HIGH] CWE-73 CVE-2026-103507: Perforce P4 Search prior to 2026.4.2 does not restrict file paths written through its logging config Perforce P4 Search prior to 2026.4.2 does not restrict file paths written through its logging configuration interface. An attacker holding the service authentication token can write arbitrary files on the host, potentially leading to code execution as the P4 Search service account.

CVE-2026-6902 [HIGH] CWE-94 CVE-2026-6902: A Remote Code Execution vulnerability in P4 (Helix Core) Server's Command-Line Client, prior to the A Remote Code Execution vulnerability in P4 (Helix Core) Server's Command-Line Client, prior to the 2025.2 Patch 2, has been fixed to address potential security risks.

CVE-2026-103512 [MEDIUM] CWE-290 CVE-2026-103512: Perforce P4 Search prior to 2026.4.2 trusts a client-supplied address when validating certain authen Perforce P4 Search prior to 2026.4.2 trusts a client-supplied address when validating certain authentication requests. An attacker holding a stolen P4 Server ticket can bypass host-based ticket restrictions and trusted-address controls, gaining access to P4 Search as the ticket's owner.

CVE-2026-103511 [MEDIUM] CWE-73 CVE-2026-103511: Perforce P4 Search prior to 2026.4.2 does not validate file names supplied to its extension installa Perforce P4 Search prior to 2026.4.2 does not validate file names supplied to its extension installation feature. An attacker with super-user or service-token privileges can write files with arbitrary content to the P4 Search installation directory.