The route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary files via a crafted Nasal script.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "flightgear", "binary_version": "3.4.0-3ubuntu1.1" } ] }