Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
4ga Boards is a boards system for realtime project management. Prior to 3.3.5, a path traversal vulnerability allows an authenticated user with board import privileges to make the server ingest arbitrary host files as board attachments during BOARDS archive import. Once imported, the file can be downloaded through the normal application interface, resulting in unauthorized local file disclosure. This vulnerability is fixed in 3.3.5.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2026-41419 Path Traversal in 4ga Boards Prior to 3.3.5 Enables Unauthorized File Disclosure https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-41419
Post summary
CVE-2026-41419 identifies a path traversal flaw in 4ga Boards before version 3.3.5 that permits unauthorized file disclosure.
CVE-2026-41419 4ga Boards is a boards system for realtime project management. Prior to 3.3.5, a path traversal vulnerability allows an authenticated user with board import privilege… https://www.cve.org/CVERecord?id=CVE-2026-41419
Post summary
This post announces CVE‑2026‑41419 as a path traversal flaw in 4ga Boards affecting users with import rights, but it does not provide a PoC, exploit, or patch information.