This vulnerability involves improper limitation of a pathname to a restricted directory (CWE-22) in the Projects Service download endpoint shared by Altium Enterprise Server and Altium 365. Authenticated users can supply crafted path parameters to bypass validation and read arbitrary files or directories from the server filesystem. The readable files include sensitive service configuration and credential material, which could be leveraged for further attacks. The issue is remediated in Altium Enterprise Server version 8.1.1 and has been fixed at the service level in Altium 365. The vulnerability has a CVSS 4.0 score of 8.3, indicating high severity.

Exploitation allows authenticated users to read arbitrary files on the server, including sensitive configuration and credential files. This can lead to information disclosure that enables further compromise of the affected systems. On multi-tenant Altium 365 deployments, exposed credentials could affect multiple services. There are no known exploits in the wild at this time.

A fix is available in Altium Enterprise Server version 8.1.1. Altium 365 has been remediated at the service level by the vendor. Users should upgrade to the fixed version or rely on the vendor's cloud service remediation. Patch status is confirmed by the vendor advisory.