Insecure file read in rule_engine.py allows symlink/path traversal
Status Open
Maintainer reply None cached
Activity 0 comments · opened Aug 7, 2026
The rule_engine.py script reads the transcript_path using a standard open() call without checking for symlinks. Since this path is provided via standard input, it poses a path traversal and symlink follow vulnerability. It should be mitigated using os.open with os.O_NOFOLLOW.