A vulnerability has been found in internetarchive up to 5.5.0 and classified as critical. Affected by this issue is the function
File.download
. Performing manipulation results in path traversal.
This vulnerability was named CVE-2025-58438. The attack may be initiated remotely. There is no available exploit.
The affected component should be upgraded.