ThreatSonar Anti-Ransomware by TeamT5 contains a CWE-23 relative path traversal vulnerability that allows authenticated remote attackers to delete arbitrary files on the system. The flaw is exploitable via web access and does not require user interaction beyond authentication. The CVSS 4.0 base score is 7.2, indicating high severity with network attack vector, low attack complexity, and high impact on confidentiality and availability. No patch or official remediation guidance is currently available from the vendor, and the product is not a cloud service.

Successful exploitation allows authenticated remote attackers to delete arbitrary files on the system running ThreatSonar Anti-Ransomware. This can lead to loss of critical files, potential disruption of security functions, and system instability. The vulnerability impacts confidentiality and availability with high severity but requires authentication, limiting exposure to authorized users with web access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict web access to the ThreatSonar Anti-Ransomware interface to trusted users only and monitor for suspicious activity. No official fix or temporary mitigation has been published by TeamT5 at this time.