This vulnerability in AGL app-framework-main (up to 17.1.12) involves improper validation of ZIP entry filenames in the widget installation process. The is_valid_filename function blocks absolute paths but does not prevent directory traversal via dot notation sequences. The zread extraction function uses openat with O_CREAT relative to a working directory file descriptor, allowing traversal outside the intended extraction directory. Critically, extraction happens before signature verification, so files written outside the temporary directory persist even if signature checks fail. This combination of Zip Slip (CWE-22) and TOCTOU race condition (CWE-367) enables an attacker to write arbitrary files anywhere on the filesystem without privileges or user interaction.

An attacker can exploit this vulnerability to write arbitrary files anywhere on the filesystem during widget installation, potentially leading to full system compromise. The vulnerability allows bypassing signature verification due to extraction occurring before signature checks, leaving malicious files permanently on the system even if the widget is ultimately rejected. The CVSS 3.1 score of 9.8 reflects critical impact with network attack vector, no privileges required, no user interaction, and high confidentiality, integrity, and availability impacts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid installing untrusted widgets or packages using the vulnerable AGL app-framework-main versions. Monitor vendor communications for official patches or temporary mitigations. Do not rely on signature verification alone as extraction occurs prior to signature checks.