Path Traversal via Prefix Match Bypass in `_get_os_path`

This report is not public...