NI FlexLogger Directory Traversal Vulnerability in usiReg Component Allowing Remote Code Execution

A remote code execution vulnerability has been identified in NI FlexLogger, specifically within the usiReg component's URI file parsing. This issue arises from inadequate validation of user-supplied paths before they are used in file operations, allowing remote attackers to create arbitrary files on affected systems. Exploitation requires user interaction, as the target must open a malicious file or visit a harmful webpage.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system, with the executed code running in the context of the current user.