A vulnerability marked as critical has been reported in Northern.tech Mender Server up to 4.0.1/4.0.2/4.1.0/4.1.1. This affects an unknown function. This manipulation causes path traversal.

This vulnerability is tracked as CVE-2026-49009. The attack is possible to be carried out remotely. No exploit exists.