An ACAP configuration file in Axis OS lacks sufficient input validation, enabling a path traversal attack that can lead to privilege escalation. The flaw requires that the device is configured to permit installation of unsigned ACAP applications and that an attacker can persuade a user to install a malicious ACAP package. Successful exploitation could allow the attacker to gain elevated privileges on the system, compromising device integrity and confidentiality.

Axis Communications AB’s AXIS OS is affected. Specific version information was not disclosed; all AXIS OS installations that allow unsigned ACAP installation are at risk.

The CVSS score of 6.7 indicates a medium severity vulnerability. The EPSS score is not available, and the flaw is not listed in the CISA KEV catalog. Explotability is limited because it depends on a permissive unsigned-ACAP installation setting and a social engineering step to convince a user to install a malicious ACAP. These prerequisites reduce the likelihood of widespread exploitation, but the potential impact remains significant given the ability to gain elevated privileges.