GHSA-7j4w-x8x8-5mvgCriticalCVSS 9.6

A flaw was found in assisted-migration-agent. An unauthenticated attacker, located on the same...

Published
June 10, 2026
Last Modified
June 10, 2026

🔗 CVE IDs covered (1)

📋 Description

A flaw was found in assisted-migration-agent. An unauthenticated attacker, located on the same local area network (LAN), can exploit a path traversal vulnerability. By crafting a specially designed gzipped tarball, the attacker can bypass security checks and write arbitrary files to the system. This could ultimately lead to the execution of unauthorized code on the appliance.

🔗 References (5)