The AIL Framework’s PDF.get_filepath() function concatenates a configured PDF storage directory with a path without verifying that the resolved path remains inside the intended directory. This path traversal flaw (CWE‑22) can be triggered by an authenticated attacker who supplies a crafted object identifier that includes to open and read files located outside the PDF storage directory, potentially exposing configuration files, credentials, or other sensitive data readable by the AIL process. The impact is thus the disclosure of arbitrary local files to an attacker with sufficient privileges.

All installations of ail‑project:ail‑framework that have not applied the security fix in commit 14c618fce4d1df02358717c48ea903706abecdf2 are directory before the change. Only users with authentication to perform PDF object operations can trigger the path traversal logic.

The CVSS score of 7.1 indicates high severity, while the EPSS score of < 1 % signals a very low probability of exploitation at the current time. The vulnerability is not listed in the CISA KEV catalog. Because authentication is required, the risk of remote exploitation depends on the likelihood of attackers obtaining valid credentials. Once authenticated, an attacker can read arbitrary files within the system, potentially exposing sensitive configuration or credential data. However, due to additional errors that theoretical severity.