This vulnerability in dazeb markdown-downloader up to commit 3d4394b34b6c99d81af817623af55e3384df5a6a allows remote attackers to perform path traversal via manipulation of the download_markdown, list_downloaded_files, or create_subdirectory functions in src/index.ts. The issue enables attackers to access files outside the intended directories. The vulnerability is confirmed with a CVSS 4.0 score of 5.3, indicating medium severity. No official fix or remediation guidance has been provided by the vendor, and the project has not responded to the issue report. Exploit code is publicly available, increasing the risk of exploitation.

Successful exploitation can lead to unauthorized access to files on the system running markdown-downloader, potentially exposing sensitive information. The vulnerability can be triggered remotely without user interaction and requires low attack complexity and privileges. However, the impact is limited by low confidentiality, integrity, and availability requirements, resulting in a medium severity rating.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch is available, users should consider restricting network access to the affected service and monitor for suspicious activity related to file access. Avoid exposing the markdown-downloader service to untrusted networks until a fix is released.