This vulnerability in TXOne Networks SafePortAgent and StellarProtect arises from improper access control in the Removable Media Validation function. A local attacker with administrator privileges can bypass the file lockdown mechanism designed to prevent unauthorized file transfers. Exploitation requires the attacker to have pre-deployed unauthorized files on removable media. Affected versions include SafePortAgent before 3.2.5024 and StellarProtect from 3.2.4011 before 5.0.1083. No official remediation or patch information is currently available.

The vulnerability allows a local administrator-level attacker to circumvent the file lockdown controls, resulting in unauthorized file transfer to the victim device. This could lead to unauthorized data modification or introduction of malicious files via removable media. There is no impact on confidentiality or availability according to the CVSS vector, but integrity is impacted.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local administrator access to trusted personnel only and monitor removable media usage policies. No vendor-provided official fix or temporary mitigation is currently documented.