A critical path traversal vulnerability in the calibre e-book manager allows unauthenticated attackers to overwrite arbitrary files, potentially leading to remote code execution.

This vulnerability involves an improper limitation of a pathname to a restricted directory (CWE-22) within the PDB reader component. An attacker can craft malicious e-book files that, when processed, allow for arbitrary file writes in binary mode, enabling the silent corruption or replacement of system files with arbitrary content.

The ability to overwrite arbitrary files on a host system presents a severe risk of unauthorized code execution and system compromise. Given the CVSS score of 8.8, this vulnerability is classified as High severity, as it can lead to complete loss of system integrity and availability through file corruption or the deployment of malicious payloads.

Immediate Action: Update the calibre software to version 9.3.0 or later immediately to incorporate the necessary path validation fixes.

Proactive Monitoring: Review system logs for unexpected file modification events or unauthorized attempts to access sensitive directories by the calibre process.

Compensating Controls: Restrict the execution of calibre to a low-privileged user account to limit the impact of potential file system writes outside of the intended application directory.

Public Exploit Available: Unknown

Due to the potential for arbitrary file writes and subsequent code execution, this vulnerability poses a significant threat to any environment utilizing calibre. Administrators should prioritize updating to version 9.3.0 across all deployments to eliminate the underlying path traversal flaw. Failure to patch may expose host systems to sophisticated attacks involving malicious e-book content.