Ady Elouej

Insufficient validation of domain and session identifiers allows path traversal. This flaw enables a non-owner subscription user or a remote attacker without authentication to redirect a privileged backend session into a directory under their control, leading to arbitrary code execution with root privileges on the server.

When reusing a handle for sequential transfers driven by environment-variable proxy configuration, the software fails to clear the proxy authentication state between requests. If an initial transfer authenticates against a proxy using Digest authentication, a subsequent transfer routed through a different proxy erroneously leaks the `Proxy-Authorization:` header intended for the first proxy.