OneNav 1.2.4 contains an authenticated arbitrary file deletion vulnerability via import_link().

Published Aug 24, 2026 · Updated Aug 25, 2026 · Assigned by mitre