Path traversal vulnerability in Remote Spark (https://www.Remotespark.Com/) SparkView allows reading and writing arbitrary files in all directories as root.
CVSS 4.0CRITICAL 10.0·Network·No auth·No interaction·EPSS 0.00378·Published 2026-05-29·Fixed in build 1127CWE-23
A vulnerability in Remote Spark SparkView before build 1122 allows an attacker to bypasses the local connection check and achieve arbitrary code execution as root on the server side.
CVSS 4.0CRITICAL 10.0·Network·No auth·No interaction·EPSS 0.00326·Published 2026-05-08·Fixed in build 1122CWE-290