The FilesystemBridge in @tinacms/graphql performs path containment checks that allow traversal via plain ../ but fail to resolve symlink or junction targets. As a result, file operations such as get, put, delete, and glob can act on files outside the intended content root. This flaw enables an attacker who can create or manipulate symlinks or junctions to read from or write to arbitrary files on the filesystem, potentially exposing sensitive data or compromising application integrity.

The vulnerability affects the tinacms:tinacms product, specifically the @tinacms/graphql library used in Tina CMS. All releases prior to version 2.2.2 are vulnerable; version 2.2.2 and later include the fix.

With a CVSS score of 7.1, the flaw is considered high severity. The EPSS score is below 1% and the vulnerability is not listed in CISA’s KEV catalog, indicating a low probability of widespread exploitation. The likely attack vector is local: an attacker who can influence the creation of symlinks or junctions within the content root can subvert path validation, read or modify files outside the root, and thereby potentially exfiltrate data or tamper with the deployment.