PT-2026-75961

Through version 1.3.0, the jailexec connection plugin's put file resolved a transfer's destination to a path on the jail host + and ran mkdir -p and mv there as root on the host. Those commands follow symbolic links, and the path was operated on outside the jail, so a symlink existing inside the...