Threats affecting pkg:github/rtgs2017/NagaAgent

CVE-2026-7784 is a path traversal vulnerability in RTGS2017 NagaAgent versions up to 5.1.0. The issue occurs in the Skills Endpoint component, specifically in the file apiserver/routes/extensions.py, where manipulation of the argument 'Name' can lead to unauthorized file path access. The vulnerability can be exploited remotely without authentication. Although the vulnerability has been publicly disclosed, the vendor has not yet responded or provided a patch. The CVSS 4.0 base score is 6.9, indicating a medium severity level.