The vulnerability in fledge-iot's fledge occurs in the upload_backup function located in python/fledge/services/core/api/backup_restore.py. This function uses tarfile.extractall(temp_path) to extract tar archives uploaded by users with admin permissions. Because the extraction is done without filtering or validating the paths of the archive members, it is vulnerable to directory traversal attacks (CWE-22). An attacker with admin role can craft a malicious tar archive that, when extracted, writes files outside the intended directory, potentially overwriting critical files or injecting malicious content.

An attacker with administrative privileges can exploit this vulnerability to overwrite arbitrary files on the system by uploading a specially crafted tar archive. This could lead to integrity violations of the system or application files. There is no direct confidentiality or availability impact indicated. Exploitation requires admin-level permissions, limiting the attack surface.

No official patch or remediation has been published yet. Since the vulnerability requires admin privileges, restrict admin access to trusted users only. Monitor vendor advisories for an official fix or update. Implementing path validation and filtering when extracting tar archives is recommended once a fix is available.