RobMarsh Image Shadow versions up to 1.1.0 contain an improper limitation of a pathname to a restricted directory, classified as a path traversal vulnerability. This weakness allows an attacker with low privileges and no user interaction to cause a denial of service. The vulnerability does not impact confidentiality or integrity but affects availability. The CVSS 3.1 vector indicates network attack vector, low attack complexity, privileges required, no user interaction, and scope changed.

The vulnerability can be exploited remotely by an attacker with low privileges without user interaction to cause denial of service, impacting the availability of the affected system. There is no impact on confidentiality or integrity according to the CVSS vector. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround information is provided, users should monitor vendor communications for updates. Until a fix is available, restricting network access to the affected service and limiting privileges may reduce exposure.