CVE-2026-94049

Name of the Vulnerable Software and Affected Versions 06ketan slideshot versions prior to 4.4.1

Description A path traversal flaw exists in the render slides() function within the packages/cli/src/renderer.ts file. This issue occurs when the htmlPath argument is manipulated, allowing a remote attacker to access files or directories outside the intended folder. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables that reference files with input that is not properly validated.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict the use of the htmlPath argument in the render slides() function to minimize the risk of exploitation.