AIKIDO-2026-624912

TL;DR

awscli guards S3 downloads against object keys that escape the destination directory by warning and skipping any key that references a parent directory. The escape check normalizes the compare key without anchoring it to the destination root, so a key with a leading slash such as /../foo collapses the parent segment and slips past the check. Downloading or syncing from a bucket that contains such crafted keys then writes files outside the intended destination directory. The fix anchors the key against the destination root before normalization so leading-slash parent references are correctly detected and skipped.