CVE-2024-55401 describes a directory traversal vulnerability (CWE-22) in 4C Strategies Exonaut prior to version 22.4. This vulnerability allows remote attackers to read files outside the intended directory structure without authentication. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and impacts on confidentiality and integrity but not availability. No official fix or patch information is available, and no known exploitation has been reported.

Successful exploitation could allow an attacker to read sensitive files on the affected system, potentially leading to information disclosure and integrity impacts. There is no indication of availability impact. The vulnerability is remotely exploitable without authentication.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict external access to the affected application and monitor for unusual file access patterns related to directory traversal attempts.