A path traversal flaw in Qsync Central allows an attacker who has authenticated via a compromised user account to specify file paths that escape the intended directory limits and read the contents of unexpected files or system data. The vulnerability could expose sensitive information from the NAS, potentially leading to data confidentiality breaches. The issue is rooted in CWE-22, which involves inadequate restrictions on the path that can be accessed by a user.

QNAP Systems Inc. Qsync Central versions 5.0.0.5 and earlier are affected. Versions 5.0.0.6, 5.1.0.2, and 5.2.0.4 or later contain a patch that addresses this issue.

The vulnerability carries a CVSS score of 7.2, indicating high severity, and an EPSS score of less than 1%, pointing to a low likelihood of exploitation at present. It is not listed in CISA's KEV catalog. An attacker can exploit the flaw by authenticating with a valid user account and issuing specially crafted file paths to traverse directories and read sensitive files.