Path Traversal in assisted-migration-agent Allows LAN Attacker to Write Arbitrary Files (CVE-2026-53476)
critical-cve-against-infra · active
A critical path traversal flaw in assisted-migration-agent lets an unauthenticated attacker on the same local network craft a malicious gzipped tarball that bypasses security checks and writes arbitrary files to the system, potentially leading to code execution on the appliance.