Pake versions prior to 3.13.1 concatenates the filename supplied via the download_file Tauri command without sanitization, allowing attackers to supply a path containing traversal characters or an absolute path. The application then downloads content from the supplied URL and writes it to the resolved file location. An attacker can exploit this to overwrite files that the user can write, such as macOS LaunchAgents, Linux autostart entries, or Windows Startup files, enabling persistence and execution of malicious code within the user's account.

The vulnerability affects the open‑source Pake framework (tw93:Pake) in all desktop applications generated from a Pake tree compiled with a version older than 3.13.1. The issue is present on macOS, Linux, and Windows platforms where the application runs with user privileges.

The vulnerability receives a CVSS score of 8.8, indicating a high severity. Though the EPSS score is not available, the scoping of the flaw suggests it is both high in potential impact and likely to be exploited in environments where malicious code can command the download_file feature, such as through a script that runs with the application. The vulnerability is not listed in CISA’s KEV catalog. The prevalent attack vector is local or via a malicious script that can invoke the Tauri command, requiring the victim to run a compromised Pake‑based application.