Threats tagged 'ghsa-r232-48q8-3598'

CVE-2026-72567 is a critical path traversal vulnerability in AsyncFuncAI's deepwiki-open product. It allows unauthenticated remote attackers to write or delete arbitrary files with root privileges via the wiki-cache endpoint. The vulnerability arises from improper sanitization of user-controlled input used to construct file paths.