CVE-2026-55062

Name of the Vulnerable Software and Affected Versions uniget CLI (affected versions not specified)

Description A path traversal issue exists in the handling of hook filenames. The application fails to sanitize user input, allowing the direct concatenation of filenames with the hooks directory path. An attacker can use directory escape sequences, such as ../, to access and manipulate arbitrary files outside the intended hooks directory. This occurs within the hooks.go file where the hookFileName variable is used without validation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.