This vulnerability involves improper link resolution before file access ('link following') in assisted-migration-agent. An attacker on the same LAN can exploit a path traversal vulnerability by crafting a malicious gzipped tarball, enabling them to bypass security mechanisms and write arbitrary files to the target system. This can result in execution of unauthorized code, compromising the appliance's integrity and confidentiality. The CVSS 3.1 score is 9.6, reflecting critical impact with network attack vector, low attack complexity, no privileges required, no user interaction, and complete confidentiality, integrity, and availability impact. The affected versions are those prior to commit bcae0438ad8386321a300413d71c982a11b7b5b7. No official patch or remediation level is stated in the vendor advisory, and no known exploits are reported in the wild as of the publication date.

Successful exploitation allows an unauthenticated attacker on the same LAN to write arbitrary files and execute unauthorized code on the affected appliance, leading to full compromise of confidentiality, integrity, and availability of the system.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-53476 for current remediation guidance. Until an official fix is available, restrict network access to trusted hosts on the LAN to limit exposure. Monitor for updates from the vendor and apply patches promptly once released.