The halo-dev halo product up to version 2.24.2 contains a path traversal vulnerability in the Download function of the MigrationEndpoint.java file, part of the Files Backup Endpoint component. An attacker can manipulate input to perform path traversal remotely, potentially accessing unauthorized files. The vulnerability has a CVSS 4.0 score of 5.1 (medium severity). Exploit code is publicly available, but there is no official patch or remediation level provided by the vendor as of the published date.

Successful exploitation allows an attacker with high privileges to remotely perform path traversal attacks, potentially accessing or downloading files outside the intended directory scope. The vulnerability has limited impact due to the requirement of high privileges and low vector complexity, but the availability of public exploits increases risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is currently documented, users should monitor vendor communications for updates. Until a patch is available, restrict access to the vulnerable endpoint and limit user privileges to reduce exploitation risk.