This vulnerability exists in the lspace-server component of Lspace-io, specifically in the file src/core/repository.ts within the Repositories File API. The affected functions fileExists, readFile, writeFile, and deleteFile improperly handle the filePath argument, allowing path traversal attacks. An attacker with local access can manipulate filePath to access or modify files outside the intended directory scope. The continuous delivery model prevents clear version identification, and no vendor advisory or patch is currently available. The vulnerability is rated medium severity with a CVSS 4.0 vector indicating local attack vector, low complexity, no user interaction, and partial impact on confidentiality, integrity, and availability.

An attacker with local access can exploit this vulnerability to traverse directories and potentially access or modify files outside the intended repository scope. This could lead to unauthorized disclosure, modification, or deletion of files on the affected system. The impact is limited by the requirement for local access and the medium severity rating.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, monitor official channels for updates. Until a fix is available, restrict local access to trusted users only to reduce risk.