The vulnerability (CVE-2026-67246) in ADM's Wallpaper component arises from inadequate validation of user-controlled wallpaper path input. An authenticated attacker can exploit this to perform path traversal, accessing or modifying files outside the designated wallpaper directory, constrained by user permissions and filesystem restrictions. Affected versions include ADM 4.1.0 through 4.3.3.RUN1 and 5.0.0 through 5.1.3.RI81. No patch or remediation information is currently provided, and no known exploits are reported in the wild.

An authenticated attacker can leverage this vulnerability to access or manipulate arbitrary files outside the intended wallpaper directory, potentially leading to unauthorized disclosure or modification of files within the scope of the attacker's permissions. The impact is limited by user privileges and filesystem security controls.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the Wallpaper component to trusted users only and monitor for suspicious activity related to file access. Avoid granting unnecessary permissions to users who can access this component.