This vulnerability (CVE-2026-30276) in DeftPDF Document Translator v54.0 involves an arbitrary file overwrite through the file import functionality. Exploiting this flaw allows an attacker to overwrite critical internal files, potentially resulting in arbitrary code execution or exposure of sensitive information. The vulnerability is remotely exploitable without authentication or user interaction, as indicated by its CVSS vector (AV:N/AC:L/PR:N/UI:N). The weakness corresponds to CWE-73 (External Control of File Name or Path). No official patch or vendor advisory is currently available.

Successful exploitation can lead to complete compromise of the affected system by enabling arbitrary code execution and unauthorized disclosure of sensitive data. The vulnerability is critical due to its high CVSS score (9.8) and the lack of required privileges or user interaction for exploitation. This poses a significant risk to confidentiality, integrity, and availability of the system running the affected software.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the file import functionality or isolating affected systems to reduce exposure. Monitor vendor channels for updates and apply patches promptly once available.