CVE-2026-93353

The copyparty SFTP front end contains a volume restriction bypass vulnerability. Authenticated SFTP users can create, remove, and truncate arbitrary paths outside permitted volume boundaries by exploiting three specific handlers: _mkdir , _rmdir , and _chattr . The root cause is that these handle...