A vulnerability in the vSolution Matrix file sharing feature allows an attacker who obtains a matching private key to authenticate to a device via SSH as root. The flaw stems from a shared cryptographic trust configuration that can be misused when the key is compromised. The resulting root access grants the attacker full control over the affected device, enabling arbitrary code execution, data theft, or sabotage.

The issue affects WolfVision Cynap Pro, Cynap Core Pro, WolfVision Cynap, and Cynap Core devices that are configured as a vSolution Matrix main/master station with the file sharing feature enabled. No specific version details are provided in the advisory.

The CVSS score of 9.2 indicates a high severity vulnerability. The EPSS score is not available, and the vulnerability is not listed in CISA KEV, suggesting limited known exploitation. Based on the description, the likely attack vector requires the attacker to acquire the private key used for the shared trust, after which they can use SSH over TCP port 50930 to log in as root. The vulnerability is exploitable only when the file sharing feature is active on a master station.