Laranode (< 1.2.1)

Laranode versions prior to 1.2.1 are vulnerable to a path traversal attack via the /filemanager/upload-file endpoint, allowing authenticated users to achieve arbitrary file write and remote code execution.