A critical vulnerability in PluginScript allows improper directory restriction, creating a significant risk of unauthorized system-wide filesystem access.

The vulnerability exists within the PluginScript functionality, which attempts to chroot plugins into a repoManagerRoot that defaults to the system root (/). This configuration failure allows plugins to escape intended directory boundaries, though the authentication requirement for triggering this remains unspecified.

A successful exploit could lead to full system compromise by allowing an attacker to bypass file-system isolation. With a CVSS score of 7.8, this vulnerability poses a high risk to data integrity and system confidentiality, potentially granting unauthorized access to sensitive configuration files or system binaries.

Immediate Action: Audit current PluginScript configurations to ensure the repoManagerRoot is restricted to a non-privileged directory and monitor vendor channels for security patches.

Proactive Monitoring: Review system access logs for anomalous file path traversal attempts or unexpected read/write operations originating from plugin processes.

Compensating Controls: Implement strict filesystem permissions (Principle of Least Privilege) for the user account running the plugin service to limit the impact of a potential jailbreak.

Public Exploit Available: false

Administrators should treat this vulnerability with high priority by verifying their deployment's root directory configurations. Until a formal patch is released, ensure that all plugins are sourced from trusted repositories and operate under highly restricted user permissions.