CVE-2026-85409: Path Traversal in Eleveo Quality Management

This vulnerability exists in Eleveo Quality Management 9.7.0 within the QuestionnaireService component's runDataExportNow function. An attacker can manipulate the file_name parameter to perform path traversal, potentially accessing files outside the intended directory. The attack vector is network-based with low attack complexity and no user interaction required. The vendor was contacted but did not provide any response or patch information. No official fix or mitigation guidance is currently available.

Successful exploitation could allow an attacker with low privileges to read or write files outside the intended directory structure, potentially leading to unauthorized data access or modification. The vulnerability is remotely exploitable without user interaction. However, the CVSS score and vector indicate limited scope and impact, with low confidentiality, integrity, and availability impacts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch is available, organizations should consider restricting network access to the affected service and monitor for suspicious activity related to file export functions. Avoid exposing the vulnerable service to untrusted networks until a fix is released.