Vasion Print Virtual Appliance Host and Application contain an arbitrary file write vulnerability due to improper handling of symbolic links in the response file directory. When tasks produce output, the service writes response data to files under /opt/PrinterInstallerClient/tmp/responses/ using the requested filename without validating symbolic links. Because the service runs as root, a local unprivileged user can create symbolic links in this directory to arbitrary filesystem locations, causing the service to overwrite or create files with root privileges. This vulnerability allows modification of configuration files, injection or replacement of binaries or drivers, and can lead to local privilege escalation and full system compromise. The CVSS 4.0 score is 8.5 (high severity).

An attacker with local unprivileged access can exploit this vulnerability to write arbitrary files as root on the affected system. This can result in modification of critical configuration files, replacement or injection of binaries or drivers, and ultimately full system compromise through local privilege escalation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local user access to the affected directories and monitor for suspicious symbolic link creation. Avoid running the service with root privileges if possible.