AIKIDO-2025-10445

TL;DR

Affected versions of this package are vulnerable to Remote Code Execution (RCE). The vulnerability arises due to insufficient validation of the dbBackupPath parameter, allowing an attacker to bypass the security checks by providing a malicious path. By crafting a request with a manipulated dbBackupPath that points to a controlled file outside the intended directory, an attacker can trigger the restoration of a malicious database backup, potentially leading to arbitrary code execution. This exploit requires the attacker to have the permissions to supply crafted input to the actionRestoreDb function, such as through a manipulated API request or a compromised account.