A vulnerability labeled as critical has been found in Omnispace Agora Project up to 25.9. This affects the function
ExternalGetFile. The manipulation results in path traversal.
This vulnerability is identified as CVE-2025-67076. The attack can be executed remotely. There is not any exploit available.
The affected component should be upgraded.
