Authenticated users can bypass administrator-defined deny rules because the software fails to canonicalize paths before evaluating access rules. Path canonicalization is the process of converting a file path into a standard, unique representation. By using case-variant or backslash-separated paths, attackers can request files with alternate representations that do not match any deny rules but still resolve to the same filesystem object, resulting in unauthorized access to restricted files within their scope.