ServerCo getssl versions up to 2.49 improperly validate ACME challenge tokens returned to clients, failing to strictly enforce RFC 8555 compliance. This flaw permits an attacker capable of supplying ACME challenge responses—such as a malicious or compromised CA endpoint or an on-path adversary—to manipulate local file paths during challenge-file handling. Exploitation can result in unauthorized file writes and path traversal, often with elevated privileges, potentially enabling remote command injection. The issue is categorized under CWE-73 and is conceptually similar to CVE-2023-38198. No vendor advisory or patch information is currently provided.

Successful exploitation allows attackers to perform unauthorized file writes and path traversal on the affected system, typically with elevated privileges. This can lead to remote command injection, compromising system integrity and security. The vulnerability affects confidentiality and integrity but does not impact availability. The CVSS 3.1 base score is 7.4 (High), reflecting network attack vector, high impact on confidentiality and integrity, but requiring high attack complexity and no privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid using affected versions of getssl or restrict exposure to untrusted ACME challenge responses. Monitor for updates from ServerCo regarding patches or official mitigations.