EUVD-2026-25613CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
Lifecycle Timeline
7DescriptionNVD
4ga Boards is a boards system for realtime project management. Prior to 3.3.5, a path traversal vulnerability allows an authenticated user with board import privileges to make the server ingest arbitrary host files as board attachments during BOARDS archive import. Once imported, the file can be downloaded through the normal application interface, resulting in unauthorized local file disclosure. This vulnerability is fixed in 3.3.5.
AnalysisAI
Path traversal in 4ga Boards before 3.3.5 allows authenticated users with board import privileges to force the server to read and expose arbitrary local files as board attachments during BOARDS archive import. Attackers can then download sensitive host files (configuration files, credentials, application source code) through the normal download interface. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Identify all 4ga Boards installations and document current versions; restrict board import privileges to only essential administrative users. Within 7 days: Contact 4ga vendor to confirm patch availability timeline and ETA for version 3.3.5 or later; implement network monitoring for unusual file downloads from board attachments. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today