Eclipse BaSyx vulnerabilities

2 known vulnerabilities in Eclipse BaSyx from Eclipse Foundation. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  Eclipse BaSyx: Server-Side Request Forgery

  CVE-2026-7412May 5, 2026Eclipse Foundation

  In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, the Operation Delegation feature fails to validate the destination URI of delegated requests. An unauthenticated remote attacker can exploit this design flaw to force the BaSyx server to ex

• 10.0 Critical severity

  Eclipse BaSyx: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-7411May 5, 2026Eclipse FoundationEPSS 3.68%

  In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, inadequate path normalization in the Submodel HTTP API allows an unauthenticated remote attacker to perform a path traversal attack. By supplying a maliciously crafted fileName parameter du