Voice Recorder CVE-2026-30284

The vulnerability exists in the file import process of Voice Recorder v10.0, where insufficient input validation or path traversal protections permit attackers to manipulate file paths during import operations. This class of vulnerability typically involves CWE-22 (Improper Limitation of a Pathname to a Restricted Directory, 'Path Traversal') or CWE-434 (Unrestricted Upload of File with Dangerous Type). The attack vector targets the application's file handling logic, allowing an attacker to write arbitrary content to locations outside the intended import directory. The dual impact (RCE and information disclosure) suggests the application either executes imported code paths or stores sensitive configuration data that becomes accessible when overwritten.