CVE-2026-97662

Summary

The flaw allows context-dependent threat actors to manipulate file operations outside the intended directory, potentially leading to arbitrary file creation, overwrite, or truncation.

Exploitability

Exploitation requires a crafted reference value supplied to the diff scan operation, making it moderately difficult. The attacker must have the ability to influence the input to the diff scan operation.

Blast radius

If exploited, the impact could be severe, as it allows for arbitrary file manipulation on the host, potentially leading to data loss or system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 0.2.0 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.