A vulnerability, which was classified as critical, has been found in boxlite-ai boxlite up to 0.8.x. Impacted is an unknown function. Performing a manipulation results in path traversal.
This vulnerability is reported as CVE-2026-46703. The attack is possible to be carried out remotely. No exploit exists.
It is advisable to upgrade the affected component.