CVE-2026-129121 · Other
NO FIX YET · SEE WHAT TO DO
C-Kermit's recursive FTP get in doftpget() trusts file names from an FTP server's NLST or MLSD listing. A malicious server can return absolute paths, tilde names or dot-dot components so that files outside the download directory, such as .bashrc, are overwritten, which can lead to code execution.
first public Oct 31, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Teams that use C-Kermit's FTP client (MGET with /RECURSIVE) to download from FTP servers, especially servers they do not fully control. Systems that only use C-Kermit for serial or dial-up work, or never fetch files over FTP, are not exposed through this flaw. The sources do not say whether the flaw is reachable with default settings.
Not affected if no-ftp-client-use, trusted-ftp-servers-only
Who cares c-kermit, ftp, linux, unix
kermit (look for the version banner) and compare it against the range 8.0.200 to before 11.1.515.MGET /RECURSIVE against FTP servers you do not control.11.1.515 or laterC-Kermit 8.0.200 before 11.1.515 contains a path traversal vulnerability in doftpget() in ckcftp.c that allows malicious FTP servers to write files outside the intended directory. Attackers can return absolute paths, tilde names, or dot-dot components in NLST or MLSD listings during MGET /RECURSIVE to overwrite files like .bashrc, leading to code execution.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.