CVE-2026-41419
4ga Boards: Import Path Traversal Leads to Arbitrary File Read
CVSS Score
7.6
EPSS Score
0.0%
EPSS Percentile
0th
4ga Boards is a boards system for realtime project management. Prior to 3.3.5, a path traversal vulnerability allows an authenticated user with board import privileges to make the server ingest arbitrary host files as board attachments during BOARDS archive import. Once imported, the file can be downloaded through the normal application interface, resulting in unauthorized local file disclosure. This vulnerability is fixed in 3.3.5.
| CWE | CWE-22 |
| Vendor | rargames |
| Product | 4gaboards |
| Published | Apr 24, 2026 |
Stay Ahead of the Next One
Get instant alerts for rargames 4gaboards
Be the first to know when new high vulnerabilities affecting rargames 4gaboards are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
Low
Availability
Low
Affected Versions
RARgames / 4gaBoards
< 3.3.5