CVE-2025-22240

Name of the Vulnerable Software and Affected Versions The product name cannot be determined.

Description The issue allows for arbitrary directory creation or file deletion. In the find file method of the GitFS class, a path is created using os.path.join with unvalidated input from the tgt env variable. This can be exploited by an attacker to delete any file on the system where the Master's process has permissions to.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.