CVE-2026-63502 - Yeti: Path traversal in ExportTask name allows authenticated arbitrary file read and write
CVE ID :CVE-2026-63502 Published : Nov. 3, 2026, 8:18 p.m. | 46 minutes ago Description :Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Prior to 2.5.1, YETI derives ExportTask.file_name from the user-controlled task name...