AIKIDO-2026-910675

TL;DR

The command-line interface extracts embedded images to the directory given by --output-dir, deriving each filename's extension from the image content type taken from the document. On Windows a backslash in the content type subpart is treated as a path separator, so a crafted content type such as image/gif\..\ yields a filename that escapes the output directory. Converting an untrusted document can therefore write image files to locations outside the intended directory. The fix parses the extension by splitting on both forward slashes and backslashes so the content type can no longer alter the output path.