This vulnerability in Hostme v2 involves improper limitation of a pathname to a restricted directory, enabling path traversal attacks. It affects versions up to and including 7.0. The CVSS 3.1 base score is 7.5, reflecting a network attack vector with low attack complexity, no privileges required, no user interaction, and an impact limited to availability. No patch or official fix information is provided in the available data.

The vulnerability can be exploited remotely without authentication or user interaction. While it does not affect confidentiality or integrity, it can cause a denial-of-service condition or other availability disruptions in the affected Hostme v2 installations. No known exploits have been reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor vendor communications for updates. No specific mitigations are provided in the available data.