Cockpit versions 2.13.5 and earlier contain a directory traversal vulnerability in the Buckets component. Authenticated attackers can exploit this flaw to write files to arbitrary locations within the uploads directory or overwrite existing assets with malicious files. This vulnerability is fixed in version 2.14.0.