Collibra Agent's restore handler contains a path traversal flaw that fails to properly validate and canonicalize file paths during ZIP extraction. An attacker can craft a ZIP archive containing paths that traverse outside the intended extraction directory, causing the Agent to write arbitrary files to the file system. This allows the attacker to place or overwrite files such as scripts or configuration files, potentially enabling remote code execution or data tampering.

The vulnerability is present in both the Collibra Platform SaaS and the on‑premises deployment of the Collibra Platform via the Collibra Agent. No specific version numbers were provided, so all installations of the Agent that implement the restore handler are considered impacted.

No CVSS or EPSS scores are available, and the vulnerability is not listed in the CISA KEV catalogue. The lack of public exploitation data suggests a low to moderate likelihood of immediate attacks, but the flaw's nature—arbitrary file creation—makes it a high‑impact risk if an attacker can supply a malicious ZIP file. Mitigation should be prioritized for systems that expose the Agent or accept ZIP archives from external sources.