SolarWinds Access Rights Manager (ARM) contains a critical directory traversal vulnerability that enables unauthenticated remote code execution with SYSTEM privileges. This flaw allows attackers to perform actions at the highest privilege level on affected systems.