CVE-2025-70796 describes an unauthenticated path traversal vulnerability in the web management interface of WTI version 3.5.0.r (2024/05/24). An attacker can send specially crafted HTTP requests containing directory traversal sequences to access files beyond the web root directory. This could lead to unauthorized disclosure of sensitive system and configuration files. The vulnerability is publicly known but lacks a CVSS score and vendor-provided remediation details. No known exploits have been reported in the wild.

Successful exploitation may result in unauthorized disclosure of sensitive system files and configuration data due to the ability to access files outside the intended web root directory without authentication. This could lead to information leakage that may aid further attacks or compromise system confidentiality.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the web management interface to trusted networks and monitor for suspicious HTTP requests containing traversal patterns.