This vulnerability arises from improper validation of user-controlled path components in image upload requests handled by the Altium Enterprise Server Vault Service UploadController. An authenticated attacker can exploit this flaw by providing an absolute path that discards the intended storage root restriction, allowing arbitrary files to be written anywhere on the server filesystem where the service account has write permissions. Because these files can be placed in web-accessible directories or overwrite critical application binaries or configuration files, the vulnerability can escalate to remote code execution, service takeover, or denial of service. The issue does not affect Altium 365 cloud deployments, as the vulnerable endpoint is not reachable and the cloud storage architecture prevents exploitation of this file-write capability.

An authenticated user can write arbitrary files to any writable location on the server filesystem, potentially leading to remote code execution, full service takeover, or denial of service. This can compromise the confidentiality, integrity, and availability of the affected server. Altium 365 cloud deployments are not impacted by this vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is currently documented, users should monitor Altium's advisories for updates. Altium 365 cloud deployments are not affected, so no action is required for those environments.