AIKIDO-2026-117817

TL;DR

Meltano's ProjectFiles resolves include_paths glob patterns from a project's meltano.yml without confirming that the matched files stay within the project root. A crafted pattern such as ../sibling/meltano.yml, or a symlink pointing outside the directory, can resolve to a file outside the project and be treated as trusted project configuration. Meltano then reads that out-of-root file and can overwrite it when configuration is updated, allowing one project's config to read and modify files belonging to sibling projects on the same host. The fix adds a containment check that requires each resolved include path to be a real file under the project root and rejects relative-traversal and symlink escapes.