The vulnerability identified as CVE-2026-32567 affects icopydoc's YML for Yandex Market versions before 5.3.0. It is a path traversal issue where the software does not properly restrict pathname access to certain directories, potentially allowing an attacker with high privileges to disrupt availability. The CVSS vector indicates network attack vector, low attack complexity, required privileges are high, no user interaction, and a scope change with no confidentiality or integrity impact but high impact on availability.

An attacker with high privileges can exploit this path traversal vulnerability to affect the availability of the affected system. There is no reported impact on confidentiality or integrity. No known exploits are currently in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch links or vendor advisories are provided, users should monitor official icopydoc communications for updates and apply any forthcoming patches promptly. Until a fix is available, restrict high-privilege access to trusted users only.