CVE-2026-124509

A path traversal vulnerability exists in floci-io Floci versions up to 2.1.0 within the S3 Destination Configuration Handler component. The root cause is improper handling of the BucketARN argument in the S3Destination.bucketName function located in services/firehose/model/DeliveryStreamDescripti...