CVE-2026-104853

A flaw was found in Nx. During migration planning, the application reads migration file paths from package manifests without validating that they remain within the intended directory. An attacker supplying a malicious package dependency can exploit this path traversal issue using directory traversal sequences or absolute paths. This can allow an attacker to write or truncate arbitrary files outside the designated temporary directory, leading to unauthorized file modification.

This issue affects the nx migrate planning path. In Red Hat products where Nx appears in source manifests (including Grafana, Ansible Automation Platform UI components, and related offerings), Nx is used only as a build-time or development dependency, is not shipped for customer use, and nx migrate is not invoked as part of product operation. Customers running the delivered packages or images are not exposed to this vulnerability. The services-management-platform javascript-clients component already includes a fixed Nx version.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.