Qt Network Uncontrolled Search Path Element Vulnerability in OpenSSL TLS Backend Allowing Rogue CA Certificate Loading

A vulnerability has been identified in the OpenSSL TLS backend of Qt Network (qtbase) within the Qt Framework for Unix. This uncontrolled search path element issue allows a local attacker to load a malicious CA certificate as a trusted system authority. The attack is executed by placing a crafted certificate file in the application's working directory.

Impact

Exploitation of this vulnerability could lead to the acceptance of a rogue CA certificate, potentially allowing for man-in-the-middle attacks or the interception of encrypted communications.