P4 Search, formerly Helix Search, allows an authenticated user with administrative privileges to supply a crafted logging configuration that writes or deletes files outside the intended logging directory. The ability to write arbitrary files in the service directory is exploitable to execute code under the P4 Search service account, thereby compromising server confidentiality, integrity, and availability.

The vulnerability is present in Perforce P4 Search 2026.4.2 and all older releases, which run on the Perforce Helix core platform.

The CVSS score of 7.3 indicates a high severity, while the EPSS score of < 1% shows low current exploitation probability. The issue is not listed in the CISA KEV catalog. Attackers need authenticated administrative access to the P4 Server, but once achieved they can craft the logging configuration to gain code execution as the service account.