Huawei HarmonyOS Path Traversal Vulnerability in Virtualization File Module

A path traversal vulnerability has been identified in the virtualization file module of Huawei HarmonyOS versions 5.0.1 and 5.0.2. This vulnerability could be exploited to manipulate file paths, potentially leading to unauthorized access to files outside of the intended directory. Successful exploitation may compromise the confidentiality of the virtualization file module.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files, thereby affecting the confidentiality of information within the virtualization file module.

Remediation

Users can refer to the Huawei August 2025 Security Update for instructions on applying the necessary patches.