Insecure file read in rule_engine.py allows symlink/path traversal
Status Closed — not planned
Maintainer reply None cached
Activity 1 comment · opened Aug 7, 2026 · closed Oct 5, 2026
The rule_engine.py script reads the transcript_path using a standard open() call without checking for symlinks. Since this path is provided via standard input, it poses a path traversal and symlink follow vulnerability. It should be mitigated using os.open with os.O_NOFOLLOW.
This issue has 1 comment on GitHub. Read the full discussion on GitHub ↗