CVE-2026-41958

Name of the Vulnerable Software and Affected Versions VisiData version dev (commit 38b21f78)

Description A path traversal issue exists in the unzip http RemoteZipFile extract functionality. Path traversal is a flaw that allows an attacker to access files and directories outside the intended folder. By providing a specially crafted URL containing a malicious .zip file, an attacker can achieve arbitrary file write on the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.