CVE-2025-22873

score

<0.1

cvss

3.8

epss

0.2%

published

2026-02-04

kev added

—

first seen

2026-10-21

An unspecified vendor's product contains a path traversal caused by improper handling of filenames ending with "../" in os.Root.Open, letting attackers access the parent directory of the root, exploit requires crafted filename input.