CVE-2026-79318 identifies a directory traversal vulnerability in web2py 3.2.2-stable (commit a7330a2bf21219fa77860b6665de927dd4f98e6d). The issue exists in the read_file() and write_file() functions within the admin webservices controller, which can be exploited to read or write arbitrary files on the server by manipulating file path inputs. No CVSS score or detailed vendor advisory is provided, and no patch or remediation information is available in the provided data.

An attacker exploiting this vulnerability could read or write files outside the intended directory scope, potentially leading to unauthorized disclosure of sensitive information or modification of critical files. The exact impact depends on the server environment and file permissions but generally poses a significant security risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected functions and validate or sanitize file path inputs to prevent directory traversal attempts.