This vulnerability, identified as CVE-2026-49112, involves an unauthenticated path traversal issue in Tammersoft Shared Files versions up to 1.7.64. The flaw allows attackers to use crafted path traversal sequences to access files outside the designated shared directory. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, high confidentiality impact, and no impact on integrity or availability. There is no vendor advisory or patch available at this time, and no known exploits in the wild have been reported.

Successful exploitation can lead to unauthorized disclosure of sensitive files on the affected system, compromising confidentiality. There is no impact on integrity or availability according to the CVSS vector. The vulnerability is exploitable remotely without authentication, increasing the risk of exposure.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected application and monitor for suspicious activity related to path traversal attempts. Avoid exposing the vulnerable service to untrusted networks where possible.