Bug ID 2151173: Starting this release, file uploads that include the percent sign (%) in the filename will be rejected by server-side validation.

Last Modified: Dec 19, 2025

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
21.0.0

Opened: Nov 11, 2025

Severity: 4-Minor

Symptoms

The percent character is reserved for URL encoding and can potentially introduce decoding-related issues that may be exploited. Rejecting '%' in filenames reduces this risk and improves the security of file handling.

Impact

Uploads that include '%' in the filename will fail with a validation error.

Conditions

Filename with % (URL encoded as %25)

Workaround

Rename files to remove or replace '%' before uploading.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips