Charmbracelet Wish before version 2.0.5 contains a flaw in the git middleware that allows an authenticated SSH user to supply a crafted repository path and escape the intended repository directory. By using a single‑depth traversal string such as ../evil on Unix or ..\..\evil on Windows, the forward‑slash count protection is bypassed, letting the attacker read or write files outside the configured root via git-upload-pack, git-upload-archive, or git-receive-pack. This results in unauthorized access to arbitrary repository data and potentially system files, compromising confidentiality, integrity, and the trust boundary of the application.

The affected product is Charmbracelet Wish, all releases prior to 2.0.5. Systems running any of these vulnerable versions host the git middleware component (charm.land/wish/v2) and expose the path traversal when accessed by authenticated SSH clients.

The CVSS score of 8.6 indicates a high severity vulnerability. The EPSS score is not available, but the KEV catalog does not list this CVE, meaning no known widespread exploits are documented yet. Exploitation requires an authenticated SSH session with permission to access the git middleware; a crafted repository path is sufficient to traverse directories and read or write arbitrary files. The flaw stems from CWE-22, a path traversal weakness, making it relatively straightforward for an attacker with valid credentials.