This vulnerability involves improper limitation of a pathname to a restricted directory in Keep Backup Daily, enabling path traversal attacks. An attacker with high privileges can potentially read files outside the designated backup directory. The CVSS score is 4.9, reflecting a medium severity with network attack vector, low attack complexity, and no user interaction required. The vulnerability does not impact integrity or availability, only confidentiality.

Successful exploitation could allow an attacker with high privileges to read sensitive files outside the intended directory, potentially exposing confidential information. There is no indication of impact on system integrity or availability. No known exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict high privilege access to trusted users only and monitor for suspicious activity related to file access. Avoid exposing the affected software to untrusted networks.