CVE-2026-101024

Summary

This vulnerability allows an authenticated user with Viewer privileges to traverse relative paths and write attacker-controlled content to the file system, potentially leading to unauthorized file creation or modification and, under certain conditions, arbitrary code execution.

Exploitability

Exploitation is moderately hard as it requires an authenticated user with specific privileges. Precondition is the presence of a user with Viewer access.

Blast radius

If exploited, this could result in unauthorized file manipulation and, under certain conditions, arbitrary code execution, impacting system integrity and confidentiality.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to v2.1.7 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.