The AIL framework’s /objects/item/diff endpoint accepts two item identifiers via the s1 and s2 query parameters but does not first confirm that the referenced items exist as valid AIL objects. An authenticated user can supply identifiers containing path traversal sequences, causing the application to read gzip‑compressed files that the AIL process can access. This leads to unauthorized disclosure of file contents, though it is limited to files readable by the application and that are compatible with the expected gzip format. The weakness is a classic path‑traversal flaw (CWE‑22).

The AIL framework (ail-project:ail-framework). No specific version information is provided.

The vulnerability scores a CVSS 5.3, indicating moderate severity, and there is no EPSS score available or KEV listing. Because an attacker must be authenticated to reach the affected endpoint, the threat requires legitimate credentials, but once authenticated they can read any local file the AIL process has read permission for. If the filesystem is large or contains sensitive data, the potential impact can be significant, although the mechanism is not capable of arbitrary code execution.