CVE-2026-40027 describes a path traversal vulnerability (CWE-22) in abrignoni's ALEAPP tool, specifically in the NQ_Vault.py artifact parser. The parser uses file names extracted from a database directly as output filenames without proper sanitization, allowing attacker-controlled input such as '../../../outside_written.bin' to escape the intended report output directory. This can result in arbitrary file writes to locations outside the designated directory, which may be leveraged to overwrite critical files and achieve code execution. The vulnerability affects versions through 3.4.0 and has a CVSS 4.0 score of 8.4, indicating high severity. There is no vendor advisory or patch available at this time.

An attacker who can influence the file_name_from values in the database used by ALEAPP can cause the application to write files to arbitrary locations on the filesystem. This can lead to overwriting executable or configuration files, potentially resulting in code execution or system compromise. The vulnerability requires local access or the ability to modify the database content. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should avoid processing untrusted or attacker-controlled databases with ALEAPP. Implementing manual validation or sanitization of file names before processing may reduce risk. Monitor official sources for updates or patches from abrignoni.