Nokia MantaRay NM contains a Relative Path Traversal vulnerability (CWE-23) in its Software Manager application due to insufficient validation of input parameters that interact with the file system. This vulnerability allows an attacker with low privileges and network access to read files outside the intended directory structure, potentially exposing sensitive information. The issue affects versions prior to 25R1-NM. The CVSS 3.1 base score is 5.7, reflecting a medium severity with high confidentiality impact but no integrity or availability impact. No vendor advisory or patch information is currently available.

An attacker with low privileges and network access can exploit this vulnerability to read arbitrary files on the affected system, potentially exposing sensitive information. There is no impact on data integrity or system availability. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the Software Manager application to trusted users and networks to minimize exposure.