This vulnerability in boazsegev facil.io up to version 0.7.58 involves a path traversal issue in the http_sendfile2 function of the lib/facil/http/http.c file, specifically in the Public Folder Handler component. An attacker can remotely manipulate file paths to access unauthorized files. The exploit is publicly available, increasing the risk of exploitation. No official remediation or patch has been provided by the vendor as of the publication date.

Successful exploitation allows remote attackers to perform path traversal, potentially accessing files outside the intended directory scope. This could lead to unauthorized disclosure of sensitive information. The CVSS 4.0 base score is 6.9 (medium severity), indicating a significant security risk without requiring user interaction or privileges.

No official fix or patch is currently available from the vendor. Users should monitor the vendor's communications for updates. Until a patch is released, consider implementing access controls or network-level restrictions to limit exposure of the affected component. Review and restrict permissions on sensitive files to minimize potential impact.