A vulnerability labeled as critical has been found in nekename OpenDeck up to 2.8.0. This affects an unknown function of the component Request Path Handler. Executing a manipulation can lead to path traversal.
This vulnerability is tracked as CVE-2026-28427. The attack can be launched remotely. No exploit exists.
The affected component should be upgraded.