AIKIDO-2026-10416

TL;DR

Affected versions of this package are vulnerable to Improper Input Validation in the handling of file paths within the configuration export functionality. Insufficient validation of user-controlled or configurable paths allows path traversal, enabling attackers to manipulate file paths and potentially write or access files outside the intended directory. This could lead to unauthorized file access or overwriting of sensitive files. The issue is fixed by introducing strict path validation using safe resolution checks to prevent traversal outside allowed directories.