A vulnerability has been found in internetarchive up to 5.5.0 and classified as critical. Affected by this issue is the function File.download. Performing manipulation results in path traversal.

This vulnerability was named CVE-2025-58438. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.