MEDIUM
Vita3K
CVE published 2026-10-18
CVE-2026-112049
A path traversal vulnerability exists in Vita3K before build 4187, allowing attackers to write files outside the install directory via crafted .vpk archives. This vulnerability can be exploited by embedding '..' segments or absolute paths in zip entry names, potentially enabling host code execution. Defenders should assess exposure and prioritize verification and updates to prevent potential code executio [truncated]