An authenticated arbitrary file deletion vulnerability exists in OneNav version 1.2.4 that allows an attacker to compromise system integrity by removing critical files.

The vulnerability is an arbitrary file deletion flaw triggered via the import_link function. Successful exploitation requires the attacker to possess authenticated access to the application.

The vulnerability carries a CVSS score of 8.1, indicating a high level of risk to operational continuity. An attacker can delete sensitive files, leading to potential service disruption, loss of configuration, or the removal of security controls, which significantly impacts system availability and integrity.

Immediate Action: Review the official project repository for the latest release and apply the update that addresses the file deletion vulnerability.

Proactive Monitoring: Monitor server access logs for suspicious requests targeting the import_link function and examine file system activity for unauthorized deletions.

Compensating Controls: Implement strict access control lists for the administrative interface to ensure that only authorized personnel can access the application, thereby mitigating the risk of exploitation by low-privileged accounts.

Public Exploit Available: Yes, a published PoC exists, as documented in the referenced security advisory by returnwrong.

Given the high CVSS score and the existence of a public proof-of-concept, users of OneNav 1.2.4 should prioritize patching immediately. Administrators must verify their current version and update to the latest release to prevent potential file system manipulation by authenticated actors.