CVE-2026-41046 is a relative path traversal vulnerability in presire's qSnapper product prior to version 1.3.3. The issue arises from improper validation of the "configName" parameter, which allows a local attacker to manipulate file paths and load malicious configuration files. Exploitation can lead to denial of service or privilege escalation to root. The vulnerability has a CVSS 3.1 base score of 7.3 (AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H), reflecting local attack vector with low complexity and no privileges required, resulting in limited confidentiality and integrity impact but high availability impact.

A local attacker can exploit this vulnerability to cause denial of service or potentially escalate privileges to root by leveraging malicious configuration files through path traversal. Confidentiality and integrity impacts are limited, but availability impact is high due to potential service disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch link is provided, users should monitor presire's advisories for updates. Until a fix is available, restrict local access to trusted users and validate or sanitize inputs related to the "configName" parameter to mitigate exploitation risk.