ALEAPP NQ Vault Artifact Parser Pfadüberschreitung

The path traversal vulnerability in ALEAPP NQ Vault Artifact Parser allows an attacker to leverage crafted file names stored in the database to write files to arbitrary locations on the system. By injecting path traversal sequences like ../../../outside_written.bin into database entries, an attacker can bypass directory restrictions and overwrite files outside the intended report output directory. This could lead to code execution if an attacker overwrites executable files or critical configuration files. The potential impact includes complete system compromise and data exfiltration.

Organizations using ALEAPP NQ Vault Artifact Parser for Android log analysis are at risk, particularly those relying on automated parsing pipelines or integrating the parser into their security incident response workflows. Environments where the parser is deployed with elevated privileges or has access to sensitive system resources are at higher risk.

• android / supply-chain:

Get-ScheduledTask | Where-Object {$_.Action.Path -like '*NQ_Vault.py*'}

• linux / server:

find / -name "NQ_Vault.py" 2>/dev/null

• generic web:

curl -I http://your-server/nq_vault_report.bin  # Check for unusual response headers

1. 2026-04-08Disclosure

   disclosure

1. Reserviert2026-04-08
2. Veröffentlicht2026-04-08
3. Geändert2026-04-09
4. EPSS aktualisiert2026-04-16

The primary mitigation for CVE-2026-40027 is to upgrade to a patched version of the ALEAPP NQ Vault Artifact Parser. Until a patched version is available, consider implementing strict input validation on all file names retrieved from the database. Sanitize user-supplied data to prevent path traversal attempts. Employ a Web Application Firewall (WAF) with rules to block requests containing suspicious path traversal patterns. Regularly review database entries for anomalous file names. After upgrading, confirm the fix by attempting to write a file outside the intended output directory using a crafted database entry; the write should be denied.