This vulnerability in spice-vdagent arises from improper sanitization of filenames provided by the SPICE host during file transfers, enabling path traversal. A malicious or compromised SPICE host can exploit this flaw to write arbitrary files to any location on the guest operating system with the privileges of the spice-vdagent process. Exploitation requires control or compromise of the SPICE host, which is typically considered untrusted in this context. The issue affects Red Hat Enterprise Linux 10. No explicit patch or remediation level is stated in the vendor advisory, and no known exploits are reported in the wild.

An attacker controlling or compromising the SPICE host can write arbitrary files anywhere on the guest OS with the privileges of the spice-vdagent process, typically the logged-in user. This can lead to unauthorized modification or insertion of files, potentially impacting system integrity. There is no direct confidentiality or availability impact reported. The attack vector is local to the SPICE host connection and requires high privileges on the host side.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-57966 for current remediation guidance. Until an official fix is available, restrict trust and access to the SPICE host to prevent exploitation. No vendor advisory content indicates that the issue is already mitigated or requires no action.