CVE-2026-40027 is a path traversal vulnerability (CWE-22) in abrignoni's ALEAPP tool, specifically in the NQ_Vault.py artifact parser. The parser uses file_name_from values from a database directly as output filenames without proper validation or sanitization. An attacker can supply a path traversal payload (e.g., ../../../outside_written.bin) to write files outside the designated report output directory. This can lead to arbitrary file writes, including overwriting executable or configuration files, which may enable code execution. The vulnerability affects versions through 3.4.0. The CVSS 4.0 vector indicates local attack vector with low complexity, no privileges required, user interaction needed, and high impact on confidentiality and integrity.

The vulnerability allows an attacker with local access and the ability to influence database contents to write arbitrary files outside the intended directory. This can compromise system integrity by overwriting executables or configuration files, potentially leading to code execution. Confidentiality and integrity impacts are rated high. There are no reports of active exploitation currently.

No official patch or remediation is currently available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, users should avoid processing untrusted database inputs with ALEAPP and consider running the tool in isolated environments to limit potential impact.