The `ocipkg` tool has a path traversal vulnerability when unpacking OCI archives. The destination directory for unpacking is derived from an attacker-controlled image name read from the archive's own index.json. This allows escaping the intended local image store directory, enabling deletion and writing of files outside the store. The flaw is fixed in version 0.4.1 by validating and sanitizing the image name to prevent path traversal.