CVE-2025-58753: Insecure Path Builder Missing Allowlistcve-2025-58753-insecure-path-builder-missing-allowlist
A method constructs and returns a file path using user input without verifying the resulting file against an explicit allow-list. In restricted contexts (like file shares), this can allow attackers to access unauthorized sibling files or bypass directory-level restrictions (CWE-862). Ensure that file access boundaries are enforced by validating the path agai