A remote unauthenticated attacker may use the unauthenticated C++ API to access or modify sensitive data and disrupt services.

An attacker that gains SSH access to an unprivileged account may be able to disrupt services (including SSH), causing persistent loss of availability.

An attacker who tampers with the C++ CLI client may crash the UpdateService during file transfers, disrupting updates and availability.

An attacker may cause chunk-size mismatches that block file transfers and prevent subsequent transfers.