This vulnerability (CVE-2026-52703) in Ninja Team FastDup versions up to 2.7.2 is a path traversal issue (CWE-35) that can be exploited without authentication. The flaw allows attackers to craft file paths containing '.../...//' sequences to bypass normal path restrictions and access or manipulate files outside the intended directory scope. The CVSS 3.1 base score of 9.6 reflects network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently available from the vendor, and no known exploits are reported in the wild.

Successful exploitation can lead to full compromise of the affected system's confidentiality, integrity, and availability by allowing unauthorized file access and potential manipulation. This could enable attackers to read sensitive files, modify data, or disrupt service operations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to FastDup instances and monitor for suspicious activity related to path traversal attempts. Avoid exposing the service to untrusted networks if possible.