This vulnerability involves improper link resolution before file access (CWE-59) in the assisted-migration-agent. By exploiting a specially crafted gzipped tarball, an attacker on the local network can perform path traversal to write arbitrary files to the system, which may lead to execution of unauthorized code. The vulnerability has a CVSS 3.1 score of 9.6 (critical) with attack vector local network, low attack complexity, no privileges required, no user interaction, and impacts confidentiality, integrity, and availability with scope change. Red Hat's advisory states that no currently supported Red Hat products are affected by this issue.

Successful exploitation allows an unauthenticated attacker on the same LAN to write arbitrary files to the system via path traversal, potentially resulting in unauthorized code execution. This impacts confidentiality, integrity, and availability of the affected appliance. However, Red Hat confirms that no currently supported Red Hat products are affected by this vulnerability.

Red Hat has determined that this vulnerability does not affect any currently supported Red Hat products. Therefore, no action is required for Red Hat customers at this time. Users of other affected software should apply any available patches or updates from their respective vendors. Patch status for other products is not confirmed here; check vendor advisories accordingly.