THREATOPS

THREAT OPS › Threat News › [GHSA] GHSA-m6jg-wr9m-cg2f (medium) — uniget CLI has Path Traversal in Hook Files - Directory Escape Vulnerability

[GHSA] GHSA-m6jg-wr9m-cg2f (medium) — uniget CLI has Path Traversal in Hook Files - Directory Escape Vulnerability

medgithub_advisoriesPublished 2026-08-17

GHSA-m6jg-wr9m-cg2f Severity: medium CVE: CVE-2026-55062

uniget CLI has Path Traversal in Hook Files - Directory Escape Vulnerability

### Summary Path Traversal vulnerability in hook filename handling allows attackers to access and manipulate arbitrary files outside the hooks directory via directory escape sequences like [passwd](vscode-file://vscode-app/app/extra/vscode/resources/app/out/vs/cod

Indicators of compromise

CVE-2026-55062cve

Original source: https://github.com/advisories/GHSA-m6jg-wr9m-cg2f