The vulnerability is a path traversal flaw that allows an authenticated user of the Query Console to supply an unsafe path to a privileged filesystem helper, granting them the ability to read any file on the server. This flaw originates from insufficient validation of user‑supplied path parameters and results in disclosure of arbitrary server files, potentially exposing sensitive configuration and credential data.

MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 are affected. The flaw is exploitable by users authenticated to the Query Console, which typically runs in a web‑based environment; therefore any user with console access can trigger the path traversal.

The CVSS score of 7.7 indicates high severity. The EPSS score is not available and the vulnerability is not listed in CISA's KEV catalog. Exploitation requires an attacker to first obtain credentials or otherwise authenticate to the Query Console. Once authenticated, the attacker can read arbitrary files, including configuration files that may contain credentials, thereby enabling further compromise of the system.