CVE-2025-50819 Details

A directory traversal vulnerability has been identified in the Beiyuouo Arxiv-Daily project, specifically in versions prior to the patch available through May 6, 2025. This vulnerability arises from the application's failure to properly sanitize user-controlled input in the topic.yml file, allowing maliciously crafted topics or subtopics to create files or directories outside the intended docs/ directory. Exploitation of this vulnerability could lead to the creation of arbitrary files, overwriting of sensitive files, or a denial-of-service condition by filling up disk space or corrupting configuration files.

Users are advised to manually inspect topic.yml files for unsafe characters like '../' and to run the tool in a container or jailed environment to limit potential damage.