A directory traversal vulnerability in beiyuouo arxiv-daily allows local attackers to perform unauthorized file system operations, posing a significant risk to system integrity.

This is a directory traversal flaw occurring within the generation logic of daily_arxiv.py when parsing the topic.yml file, requiring low-privileged local access to exploit.

Successful exploitation of this flaw could lead to unauthorized file modification or deletion, potentially resulting in system instability or the corruption of critical data. With a CVSS score of 7.1, this vulnerability is classified as High severity because it allows an attacker to impact system integrity and availability, even if limited to a local context.

Immediate Action: Review the provided vendor security advisory and monitor the upstream GitHub repository for a commit that addresses this flaw in daily_arxiv.py.

Proactive Monitoring: Inspect system and application access logs for unusual file path references or attempts to access directories outside of the expected application scope.

Compensating Controls: Ensure that the application runs with the least privilege necessary to limit the potential impact of file system access if the process is compromised.

Public Exploit Available: Unknown.

Given the High severity of this vulnerability and the existence of a proof-of-concept, administrators should prioritize restricting local access to the affected environment. Users are strongly advised to monitor the official repository for a permanent fix and apply updates as soon as they are made available to secure the application.