This vulnerability in LambertGroup CLEVER (up to version 2.6) involves improper limitation of a pathname to a restricted directory, enabling path traversal attacks. An attacker can potentially read sensitive files outside the intended directory boundaries without authentication or user interaction. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, high confidentiality impact, and no impact on integrity or availability.

Successful exploitation could allow an unauthenticated remote attacker to read sensitive files on the affected system, potentially exposing confidential information. There is no impact on system integrity or availability according to the CVSS vector. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the vulnerable component and monitor for suspicious activity related to path traversal attempts. Avoid exposing the affected service directly to untrusted networks.