CVE-2022-26049

CVE-2022-26049 is a directory traversal vulnerability affecting the com.diffplug.gradle:goomph package before version 3.37.2. This flaw allows a malicious zip file to write content to arbitrary file system locations, potentially leading to remote code execution if critical files are overwritten. With a CVSS score of 8.8 (High), it has a network attack vector and low attack complexity, but requires authenticated access. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.