The host is installed with FileZilla 3.x before 3.41.0 and is prone to an untrusted search path vulnerability. A flaw is present in the application, which fails to properly handle a malicious fzsftp binary. Successful exploitation might allow an attacker to gain privileges.