RSA Archer GRC contains a flaw that allows an attacker to traverse outside of a restricted path. The issue is due to the program not properly sanitizing user input, specifically directory traversal style attacks (e.g., ../../). This directory traversal attack would allow an attacker to upload arbitrary files and execute arbitrary code.