CVE-2026-110935

The PFI plugin framework is vulnerable to a path traversal flaw during the deployment routine. The software fails to validate path components when extracting archive entries to the local plugin repository, specifically failing to reject relative path segments like '..' . This allows an unauthenti...