AIKIDO-2026-64772

TL;DR

The get_build_failure_logs, download_usage_api_data, and find_underused_resource_classes tools pass caller-supplied outputDir and csvFilePath values into filesystem operations without validation, and interpolate jobId, startDate, and endDate into output filenames without sanitization. A caller who controls tool input can escape the intended directory and create directories, write files, or read files anywhere the server process can access, including overwriting configuration or startup files. Because output filenames derive from caller input and the temp directory is world-writable, a pre-planted symlink can also redirect a write to an arbitrary target. The fix confines reads and writes to permitted roots, unconditionally rejects system and hidden directories, reduces filename segments to safe values, and opens writes with O_NOFOLLOW.