PT-2026-35064 · 4Gaboards · 4Gaboards

Published 2026-04-24 · Updated 2026-04-25 · CVE-2026-41419

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions 4ga Boards versions prior to 3.3.5

Description A path traversal issue allows an authenticated user with board import privileges to force the server to ingest arbitrary host files as board attachments during the BOARDS archive import process. These files can subsequently be downloaded through the standard application interface, leading to unauthorized local file disclosure.

Recommendations Update to version 3.3.5.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-41419

Affected Products

4Gaboards

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-41419 · Security Note
• https://github.com/RARgames/4gaBoards/security/advisories/GHSA-rrjq-7x8g-cmgm · Note
• https://twitter.com/VulmonFeeds/status/2047884932903567752 · Twitter Post
• https://twitter.com/CVEnew/status/2047798572259910112 · Twitter Post