This vulnerability (CWE-22) in ABB Mint Workbench I permits improper limitation of a pathname to a restricted directory, enabling path traversal attacks. Versions up to and including 5876 are affected. The flaw allows an unauthenticated attacker to read sensitive files outside the intended directory boundaries, potentially exposing confidential information. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges or user interaction, with high confidentiality impact but no integrity or availability impact.

An attacker can remotely exploit this vulnerability without authentication or user interaction to read sensitive files outside the restricted directory, leading to a confidentiality breach. There is no impact on data integrity or system availability reported.

No official patch or remediation information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict network access to the affected application and monitor for suspicious activity related to file access attempts.