CVE-2026-115354: Python Path Traversal Unconfined Os Path Join Opencve-2026-115354-python-path-traversal-unconfined-os-path-join-open
Unconfined path construction before a file read: a dynamic path segment $COMP is joined onto a base directory with os.path.join() and the result is opened without os.path.realpath() canonicalization and without a containment check. os.path.join() silently discards the base directory when $COMP is absolute, and os.path.normpath() only collapses ".." segments
