CVE-2026-10073 is a relative path traversal vulnerability in Interinfo's DreamMaker software. It allows unauthenticated local attackers to perform arbitrary file reads by exploiting path traversal sequences, thereby accessing system files outside the intended directory scope. The vulnerability requires no privileges or user interaction and has a high impact on confidentiality. The CVSS 4.0 vector indicates network attack vector, low attack complexity, and no privileges required. No vendor-provided patch or mitigation details are currently available, and the software is not a cloud service.

Successful exploitation allows unauthenticated local attackers to read arbitrary system files, potentially exposing sensitive information. This compromises confidentiality but does not indicate impact on integrity or availability. The high CVSS score reflects the ease of exploitation and significant confidentiality impact. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users only and monitor for suspicious activity related to file access. Avoid exposing the affected software to untrusted local users. No official or temporary fixes have been published by the vendor at this time.