CVE-2026-33922

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description A path traversal vulnerability exists in the Offline archives functionality of the local web interface. This issue occurs because of insufficient validation of an input parameter, allowing a local user with administrative credentials to submit an archive name containing traversal sequences. This can lead to the deletion of arbitrary files accessible by the Arc process, which operates with administrative privileges on the host.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.