---
id: "CVE-2026-123973"
page: "https://infrastack.ai/live/CVE-2026-123973"
kind: "vulnerability"
aliases: ["CVE-2026-123973"]
title: "CopyMove for SharePoint: ZIP import lets authenticated users write files outside directory"
severity: "medium"
cvss: 5.0
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["copymove-for-sharepoint", "other", "self-hosted", "sharepoint"]
not_affected_if: ["add-on-not-installed", "no-zip-import-access"]
published_at: "2026-11-06T18:18:05+00:00"
first_seen_at: "2026-11-06T18:44:09+00:00"
updated_at: "2026-11-06T18:45:29+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-123973", "first_seen_at": "2026-11-06T18:44:09+00:00"}]
exploit_sources: []
---

# CopyMove for SharePoint: ZIP import lets authenticated users write files outside directory

Link for people: https://infrastack.ai/live/CVE-2026-123973 (this .md is for agents)

CopyMove for SharePoint 2019 and CopyMove for SharePoint V6 have a path traversal flaw in their ZIP import feature. An authenticated user with access to that feature can supply a crafted ZIP archive whose entry paths write files outside the intended extraction directory.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check whether CopyMove for SharePoint 2019 or CopyMove for SharePoint V6 is installed on the SharePoint farm.
- Check whether the ZIP import functionality is in use and which users have access to it.
- Compare the installed version with the vendor's advisory; the sources give no fixed version.

## Fix

- The vendor says the issue is addressed by adding ZIP archive entry path validation; no fixed version is named in the sources.

## Timeline

- 2026-11-06T18:44:09+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-123973

## From the sources

SharePoint Products CopyMove before 2026-11-06 allows traversal. An authenticated SharePoint user with the necessary permissions to use the ZIP import functionality may exploit a path traversal vulnerability in CopyMove for SharePoint 2019 and CopyMove for SharePoint V6 by supplying a crafted ZIP archive. A path traversal vulnerability in the ZIP import functionality of SharePoint Products ApS CopyMove for SharePoint 2019 and CopyMove for SharePoint V6 allows a user with access to the ZIP import functionality to supply a crafted ZIP archive containing malicious entry paths. During extraction, these paths may cause files to be written outside the intended extraction directory. The issue has been addressed by implementing ZIP archive entry path validation to prevent extraction outside the designated directory.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_