IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain a path traversal vulnerability that allows a remote authenticated attacker to perform arbitrary file writes. This flaw could lead to complete compromise of confidentiality, integrity, and availability of the affected system.