CyberRota Analysis
AI-GeneratedThe vulnerability exists in Fledge's backup-restore upload handler, which improperly processes admin-uploaded tar archives, allowing for arbitrary file writes outside the designated temporary directory. This flaw can be exploited by an authenticated admin user to overwrite files anywhere on the filesystem accessible to the Fledge process. Organizations using Fledge should prioritize patching this vulnerability to mitigate the risk of unauthorized file manipulation and potential system compromise.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Fledge's backup-restore upload handler, upload_backup (python/fledge/services/core/api/backup_restore.py), calls tarfile.extractall(temp_path) on an admin-uploaded tar archive with no filter argument and no per-member path validation. Requires the admin role (@has_permission("admin")).