ROS# versions prior to V2.2.2 are vulnerable to a critical path traversal flaw, enabling remote attackers to read unauthorized files from the host system.

This is a path traversal vulnerability caused by the failure to properly sanitize user-supplied input. This flaw allows a remote, unauthenticated attacker to escape intended directory boundaries and access sensitive files on the underlying filesystem.

The ability to perform arbitrary file reads can lead to the exposure of sensitive configuration files, credentials, or proprietary source code. With a CVSS score of 9.1, this vulnerability poses a severe risk of data exfiltration and credential theft, which could be leveraged for further lateral movement within the network.

Immediate Action: Update the ROS# software to version V2.2.2 or later to resolve the input sanitization defect.

Proactive Monitoring: Review system and application access logs for attempts to traverse directories (e.g., sequences like "../") in file-related requests.

Compensating Controls: Deploy a Web Application Firewall (WAF) or filesystem monitor configured to block or alert on directory traversal patterns targeting the application.

Public Exploit Available: Unknown

This path traversal vulnerability represents a significant security risk to any deployment of ROS#. Administrators must prioritize the transition to version V2.2.2 to prevent unauthorized file access and potential system-wide compromise.