Coturn's "psd print sessions dump" command accepts a filename supplied on the command line and uses it directly in an fopen call without performing any path validation. An authenticated administrator with command‑line access can supply a path that overlaps any file writable by the coturn process, causing the session dump data to overwrite that file. This arbitrary file write can corrupt configuration files, replace executables or payloads, and in the worst case allow an attacker to insert malicious code that coturn later executes, thereby compromising system integrity. Based on the description, it is inferred that overwriting an executable could lead to further execution, but the CVE statement does not explicitly claim remote code execution.

All deployments of coturn server version 4.12.x and earlier are affected. The issue was fixed in release 4.13.0, so any installation that has not been upgraded is vulnerable.

The CVSS score of 6.0 denotes a moderate severity. The EPSS score is < 1%, indicating a very low but nonzero probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog. The attack requires authenticated administrative access to the coturn CLI, which limits the likelihood of exploitation but still poses a significant threat in environments where such access is not tightly controlled. The lack of path validation is the main weakness, as provided by CWE-22 and CWE-73.