A path traversal flaw in the Git Service component allows an authenticated user with basic git rights to supply file paths that escape the intended repository boundaries. The attacker can move arbitrary files and place attacker‑controlled script content into directories that are later invoked by the service. This provides remote code execution under the Git Service account. In multi‑tenant Altium 365 environments, the flaw could also expose data belonging to other tenants on the same node.

The vulnerability impacts Altium 365 and Altium Enterprise Server. Altium Enterprise Server is affected by versions prior to 8.1.1, which includes the Git Service component that accepts unvalidated paths. Altium 365 has a service‑level fix that addresses the same flaw.

With a CVSS score of 9.4, the vulnerability is considered critical. The EPSS score is unavailable, but the lack of a KEV listing does not diminish the severity. The attack requires authentication and basic git access, yet the ability to execute code is obtained through repository path manipulation. Attackers who can manipulate file move operations can place malicious scripts that are later executed by the service, enabling full control of the Git Service account.