The vulnerability exists in fledge's backup-restore upload handler (upload_backup() in python/fledge/services/core/api/backup_restore.py), which uses tarfile.extractall() without filtering or validating archive member paths. This allows an attacker with admin role permissions to craft a tar archive containing path traversal sequences ('../') that cause files to be extracted outside the designated temporary directory. As a result, arbitrary file writes can occur anywhere on the filesystem accessible by the Fledge process, potentially leading to integrity violations. No patch or remediation level is currently indicated, and no known exploits are reported in the wild.

An attacker with admin privileges can write arbitrary files to any location accessible by the Fledge process, potentially modifying or replacing critical files. This impacts the integrity of the system but does not affect confidentiality or availability according to the CVSS vector. The vulnerability requires high privileges (admin role) and network access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict admin access to trusted users only and carefully validate any uploaded backup archives before processing. Monitor vendor channels for updates or official patches addressing this issue.