A vulnerability categorized as critical has been discovered in spice-vdagent . Affected by this issue is some unknown functionality. Such manipulation leads to path traversal. This vulnerability is documented as CVE-2026-57966 . The attack needs to be performed locally. There is not any exploit available.