This vulnerability (CWE-23) in Trend Micro TrendAI Apex One on-premise server enables a local attacker who already has administrative privileges to perform a relative path traversal. This allows modification of a critical table on the server to inject malicious code that can be propagated to managed agents. The attack vector is local with high attack complexity and requires high privileges, but results in high confidentiality impact, low integrity impact, and low availability impact. No patch or official remediation guidance has been provided yet, and no known exploits are reported in the wild.

If exploited, an attacker with administrative access to the Apex One server could inject malicious code into a key server table, potentially compromising the confidentiality of data and affecting the integrity and availability of the system to a lesser extent. Since exploitation requires prior administrative credentials and local access, the risk is limited to environments where such access is already obtained by an attacker.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, ensure strict control and monitoring of administrative access to the Apex One server. Since exploitation requires administrative credentials, protecting these credentials and limiting local access to the server are critical interim mitigations.