CVE-2017-8921

CVE-2017-8921 is a directory traversal vulnerability in FlightGear versions prior to 2017.2.1, specifically within the FGCommand interface. This flaw allows a remote attacker to overwrite user-writable files with FlightGear flightplan XML data, potentially damaging user files through a malicious third-party aircraft. Rated with a CVSS score of 7.5 (HIGH), it has a network attack vector and low attack complexity, but does not impact confidentiality or availability. There is no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this vulnerability.