CVE-2026-120324

A path traversal vulnerability exists in Aklivity Zilla versions up to 1.3.4, 2.4.7, and 2.5.0-rc2. The flaw is located in the Path.resolve function of the FileSystemServerFactory within the http-filesystem Binding component. Manipulation of the params argument allows for remote path traversal. P...