CVE-2026-57567

The Readest ebook reader for desktop (Tauri builds prior to 0.11.10 ) is vulnerable to path traversal and arbitrary file read/write due to improper filesystem scope validation. The download_file and upload_file commands in apps/readest-app/src-tauri/src/transfer_file.rs accepted webview-controlle...