An improper isolation or compartmentalization flaw exists in QNAP Systems' Notes Station 3 that allows a host user directory, mounted with write permissions, to be accessed from within an application container. If an attacker already holds local administrator credentials, this flaw can be leveraged to escape the container boundary and perform actions with host privileges. The weakness is a classic container escape, classified as CWE‑653. The resulting compromise could lead to unauthorized modification of system files, persistence, or further lateral movement within the NAS.

QNAP Systems Inc. offers Notes Station 3. Versions prior to 3.9.11 are vulnerable. The fix is released in 3.9.11 and later. This affects deployments using the application on QNAP NAS devices.

The CVSS score of 8.4 indicates high impact. EPSS is less than 1%, implying a low likelihood of current exploitation. The vulnerability is not listed in CISA KEV, but the existence of the flaw and the local administration requirement means a compromised internal user could exploit it. Based on the description, it is inferred that the attack vector requires local administrator access and exploiting the write‑mounted host home folder inside the container. No remote access vector is implied.