AIKIDO-2026-943964

TL;DR

Affected versions of the package allow a Permission Model bypass where trace_events.createTracing().enable() can write trace logs outside paths permitted by --allow-fs-write. Enabling tracing did not enforce filesystem write permission checks against the configured trace event file pattern, so code running under a restricted Permission Model could write outside the intended allowlist and weaken the security boundary. The fix checks FileSystemWrite permission on the resolved trace file path before starting the tracing agent.