The vulnerability in Wertheim SafeController Software for VAULT ROOMS (Safe Deposit Locker System) arises from insufficient server-side validation of uploaded files. Specifically, the /safe/contract/uploadcustomdocuments endpoint checks the HTTP Content-Type header provided by the user to determine if the file type is allowed (e.g., pdf, jpeg, tiff, png). Because this header is user-controlled and not reliably verified, an authenticated attacker with any permission level can bypass the intended restrictions and upload files of arbitrary content, potentially leading to security issues related to unsafe file uploads.

An authenticated attacker with any role or permission level can upload arbitrary files by spoofing the Content-Type header. This could lead to unauthorized file uploads that might be used to execute malicious code, store malicious content, or otherwise compromise the system depending on how uploaded files are handled. The CVSS 4.0 base score is 5.3 (medium severity), reflecting network attack vector, low attack complexity, no user interaction, and limited integrity impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the upload endpoint to trusted users only and consider implementing additional server-side validation of file content beyond relying on the Content-Type header. Monitor vendor communications for updates on patches or official mitigations.