The vulnerability is a path traversal flaw in the 'shame next' command of the Shamefile linter. An attacker can supply a crafted shamefile.yaml that contains path traversal sequences, allowing the tool to read and display the contents of files outside the repository, one line at a time, in the terminal of the user who executes the command. Because the flaw can reveal any file accessible to the user, it causes direct information disclosure.

All users of the Shamefile project before version 0.1.7 are affected. The project is maintained by BKDDFS and the relevant product is Shamefile. The unpatched code path exists in all releases older than 0.1.7, while versions 0.1.7 and later include the fix. No other versions or products are known to be impacted.

The CVSS score of 5.5 indicates a medium severity. The EPSS score of less than 1 % suggests a very low likelihood of exploitation, and the vulnerability is not yet listed in the CISA KEV catalog. Exploitation requires an attacker to place a malicious shamefile.yaml into a repository and for a user — typically a developer or a CI runner — to execute 'shame next' against that file. Once the command is run, the tool streams the contents of files outside the repository to the terminal, allowing an attacker to read sensitive data.