Path Traversal Vulnerability in chonkie-inc littrs Product

CVE-2026-97365

What is CVE-2026-97365?

A path traversal vulnerability exists in chonkie-inc's littrs versions 0.6.1 and 0.6.2, specifically within the Sandbox::mount function in the file crates/littrs/src/lib.rs. This flaw allows an attacker to manipulate the 'relative' argument, leading to unauthorized file access on the server from a remote location. Although the vendor was notified about this issue prior to its public disclosure, there has been no response, increasing the risk of exploitation. Users are urged to assess the impact and apply necessary mitigations.

References