This vulnerability (CVE-2026-8361) involves a relative path traversal issue (CWE-23) in the WOSDefaultHttpModule.dll of Gladinet Triofox. Specifically, when processing URL paths beginning with /woshome, the module does not properly sanitize input, enabling attackers to traverse directories and potentially access sensitive files outside the web root. The CVSS 3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges or user interaction required, unchanged scope, and high confidentiality impact without affecting integrity or availability.

An attacker can exploit this vulnerability remotely without authentication to read arbitrary files on the affected system, potentially exposing sensitive information. There is no impact on system integrity or availability according to the CVSS vector. No known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is currently documented, users should monitor Gladinet's advisories for updates. Until a patch is available, consider restricting access to the affected module or applying network-level controls to limit exposure if feasible.