CVE-2026-105699: Python Storage Unvalidated Filename Path Traversalcve-2026-105699-python-storage-unvalidated-filename-path-traversal
A caller-supplied file name (and/or owner/folder id) is joined directly into a filesystem path and used for a file operation without path-containment validation. A URL-decoded name containing "/" or ".." escapes the storage directory boundary (data_dir/<id>/) and lets an authenticated caller read, overwrite, delete or stat files outside the intended folder,
