openziti zrok versions before 2.0.3 contain a path traversal vulnerability in the Python SDK ProxyShare Flask proxy route. The vulnerability arises because the route accepts an absolute URL in the request path and uses urllib.parse.urljoin to combine it with the configured target host. This allows the requested path to override the target host, enabling an attacker to cause the server to fetch and return responses from arbitrary URLs chosen by the attacker. This behavior can lead to unauthorized data disclosure or other impacts depending on the attacker-controlled URL. The vulnerability is addressed in version 2.0.3.

An attacker can exploit this vulnerability to cause the server to make requests to arbitrary URLs, potentially exposing sensitive data or interacting with unintended resources. The CVSS 4.0 score is 9.9 (critical), indicating high impact with network attack vector, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability.

Upgrade openziti zrok to version 2.0.3 or later, where this vulnerability is fixed. Patch status is confirmed by the vendor stating the issue is resolved in 2.0.3. No other mitigation is indicated.