A vulnerability described as critical has been identified in mvt-project mvt up to 2026.5.11. This impacts an unknown function of the component iOS Backup Handler. Such manipulation of the argument File leads to path traversal.

This vulnerability is referenced as CVE-2026-46486. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.