CVE-2026-104025 Path traversal in PeaZip object preview allows execution of arbitrary programs via a crafted archive entry name

[
  {
    "vendor": "PeaZip",
    "product": "PeaZip",
    "platforms": [
      "Windows"
    ],
    "collectionURL": "https://github.com/peazip/PeaZip/releases",
    "repo": "https://github.com/peazip/PeaZip",
    "modules": [
      "archive object preview/open (execute_obj in peach.pas)"
    ],
    "programFiles": [
      "peazip-sources/dev/peach.pas",
      "peazip-sources/dev/list_utils.pas"
    ],
    "programRoutines": [
      {
        "name": "execute_obj"
      },
      {
        "name": "checkfiledirname"
      }
    ],
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "11.3.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:2.3:a:peazip:peazip:*:*:*:*:*:*:windows:*:*"
    ]
  }
]