The vulnerability identified as CVE-2026-31913 affects Whitebox-Studio Scape versions prior to 1.5.16. It involves improper limitation of a pathname to a restricted directory, commonly known as a path traversal issue. This allows an attacker to manipulate file paths to access files and directories outside the intended restricted scope. The CVSS v3.1 base score is 8.6, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and a scope change with no confidentiality or integrity impact but high impact on availability.

Exploitation of this vulnerability can lead to disruption of service (availability impact) by accessing or manipulating files outside the intended directory restrictions. There is no direct confidentiality or integrity impact reported. No known exploits in the wild have been documented at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or fix information is provided in the available data. Users should monitor Whitebox-Studio advisories for updates and apply any official fixes once released.