This vulnerability exists in PaperCut MF 25.0.4's Shared Account Synchronization feature, where administrative users can configure a source path for account data synchronization. Because the application does not properly validate or sanitize the specified file paths, an authenticated admin can perform absolute path traversal to read arbitrary text-based files on the local filesystem. When synchronization is triggered, the contents of these files are parsed and displayed in the account management interface, potentially disclosing sensitive system or configuration data. The impact depends on the permissions of the service account running the application. No known exploits are reported in the wild, and no patch or official remediation has been published yet.

An authenticated user with administrative privileges can exploit this vulnerability to read arbitrary files on the local system where PaperCut MF is installed. This can lead to unauthorized disclosure of sensitive configuration or system information. The severity is rated medium (CVSS 4.6), reflecting limited impact due to required administrative access and lack of remote code execution or privilege escalation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict administrative access to trusted users only and monitor configuration changes related to account synchronization paths. Avoid specifying untrusted or external file paths in synchronization settings.