CVE-2026-34030

Vulnerability

The vulnerability exists in Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014. The application does not sufficiently validate the branch code when a new branch is created. This branch code is later used in filesystem path generation for uploaded files, profile pictures, and settings. An authenticated attacker with the settings_branches_manage privilege can include path traversal sequences in the branch code, influencing the final filesystem location used by affected file operations. This allows files to be stored in unintended directories, subject to service-account write permissions and branch-code length restrictions [1].

Exploitation

An attacker must be authenticated and possess the settings_branches_manage privilege. The attacker creates a new branch with a branch code containing path traversal sequences (e.g., ../). When the application later uses this branch code to construct filesystem paths for file operations (uploads, profile pictures, settings), the traversal sequences redirect the file write to an arbitrary location on the filesystem. The success depends on the service account having write permissions to the target directory and the branch code not exceeding length restrictions.

Impact

Successful exploitation allows the attacker to write files to unintended locations on the server. The exact impact depends on the write permissions of the service account. If the service account has broad write access, the attacker could overwrite configuration files, inject malicious scripts, or place files in web-accessible directories, potentially leading to further compromise. The vulnerability is classified as medium severity.

Mitigation

The vendor has released a patch for this vulnerability. Users should contact Wertheim to obtain the update and apply it immediately. No specific fixed version number was provided in the advisory. As a workaround, restrict the settings_branches_manage privilege to only trusted administrators and monitor branch code inputs for path traversal patterns [1].