Arbitrary File Deletion in ugw-restore

Successful exploitation allows a remote authenticated attacker with user-level privileges to delete arbitrary local files on the affected system. This can compromise system and application integrity and may cause denial of service or operational disruption if critical files, configuration files, application data, or other required local resources are removed. The provided CVSS vectors indicate high integrity impact and high availability impact, with no stated confidentiality impact.

Until a patch is applied, restrict access to the ugw-restore functionality to only trusted administrative users where operationally possible, and disable or limit exposure of the affected interface if feasible. Implement filesystem permission hardening so the vulnerable component cannot delete sensitive files outside its intended working directory. Add monitoring and alerting for unexpected file deletion events and suspicious use of the ugw-restore method. Network access to the affected service should be minimized to trusted management networks only.

Apply the vendor fix or update referenced in the CERT VDE advisory VDE-2026-039 when available. The underlying issue should be remediated by enforcing strict validation and sanitization of all user-controlled input used by the ugw-restore method for file operations, including restricting operations to an allowlisted directory, canonicalizing paths before use, and rejecting path traversal or other unsafe path elements. If a vendor patch is available, it should be prioritized.