nemo_toolkit is vulnerable to path traversal. The vulnerability exists in the asr_service.py
as it does not properly validate the access permissions, allowing an attacker to access and delete any files outside the expected directory when admin privileges are available.