The vulnerability permits an authenticated remote attacker to craft payloads against backup endpoints that traverse directories and read or execute files placed via the backup feature. Because an earlier flaw removed proper authorization checks for backup files, any user, even unauthenticated, can read these files. Consequently, sensitive configuration files or arbitrary code stored in the backup repository can be disallowed, enabling execution of malicious code and leading to full system compromise. The weakness is identified as CWE‑22, path traversal.

SOPlanning versions 1.55 and below are affected. The vulnerability is present in the backup endpoints of the SOPlanning application and allows traversal of the filesystem hierarchy to locate files stored by the backup function.

The CVSS score of 6.4 indicates a moderate severity, while the EPSS score is unavailable. The defect is not listed in the CISA KEV catalog. The most likely attack path involves an authenticated user creating or modifying a backup file with a crafted path that includes traversal sequences; an unauthenticated user can then read it, or the file can be executed if configured to run. This provides a direct route to arbitrary code execution on the target host.