This vulnerability affects the mt_uploadImage function in the rpc/TXP_RPCServer.php file of Textpattern up to version 4.9.1. It allows remote attackers to perform path traversal by manipulating the file.name argument, potentially enabling unauthorized file access or overwriting. The vendor has acknowledged the issue and intends to provide a fix in a future release. The CVSS 4.0 base score is 5.3, indicating medium severity with network attack vector, low attack complexity, and no user interaction required.

Successful exploitation could allow an attacker to traverse directories on the server by manipulating file paths during image upload, potentially leading to unauthorized access or modification of files. However, the impact is rated medium, and no active exploitation in the wild has been reported to date.

Currently, no official patch or workaround is available. Users should monitor the vendor's announcements for the upcoming fixed release and plan to update promptly once it is released. Until then, consider restricting access to the XML-RPC interface or implementing additional input validation controls if feasible.