---
id: CVE-2026-107777
title: Thermo Fisher Torrent Suite Software Path Traversal
summary: "Thermo Fisher Torrent Suite Software\_is vulnerable to a path traversal, which could allow an authenticated attacker to read arbitrary files on the Torrent Server that are accessible to the web service account."
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'
cvssSource: cna
cwe:
  - CWE-22
vendor: Thermo Fisher
product: Torrent Suite Software
affected:
  - torrent_suite_software <= 5.18
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-16T15:05:56.902592Z'
published: '2026-10-16'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T15:20:17.858Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-107777'
references:
  - url: >-
      https://documents.thermofisher.com/TFS-Assets/CORP/Product-Guides/Ion_OneTouch_2_and_Torrent_Suite_Software.pdf
  - url: 'https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-288-01'
  - url: >-
      https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-288-01.json
tags:
  - cve.org
ingestedAt: '2026-10-16T15:11:47.120Z'
---

## Overview

Thermo Fisher Torrent Suite Software is vulnerable to a path traversal, which could allow an authenticated attacker to read arbitrary files on the Torrent Server that are accessible to the web service account.

## Affected

- `torrent_suite_software <= 5.18`

## Remediation

Thermo Fisher has fixed the vulnerability and recommends users update Torrent Suite Software to version 5.22 or later.






For more information, refer to Thermo Fisher's Security bulletin: 





 https://documents.thermofisher.com/TFS-Assets/CORP/Product-Guides/Ion_OneTouch_2_and_Torrent_Suite_Software.pdf