QNAP File Station 5 Path Traversal Vulnerability

A path traversal vulnerability has been identified in QNAP File Station 5, specifically in versions 5.5.x prior to 5.5.6.5190. This vulnerability allows local attackers with administrator accounts to exploit the issue and read the contents of unexpected files or system data.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files or system information.

Remediation

Users are advised to update QNAP File Station 5 to version 5.5.6.5190 or later. Instructions for updating the application are available on the QNAP website.