CVE-2026-54567: File Validation Bypass Via Reassignment

A validated filename is subsequently reassigned to an unvalidated value before being saved, potentially bypassing extension checks and directory traversal protections. Ensure that overriding variables are sanitized and re-validated.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Python
greprules fetch cve-2026-54567-file-validation-bypass-via-reassignment --engine opengrep

Description

A validated filename is subsequently reassigned to an unvalidated value before being saved, potentially bypassing extension checks and directory traversal protections. Ensure that overriding variables are sanitized and re-validated.