A vulnerability was found in yuzutech kroki. It has been declared as problematic. The affected element is the function
convert. Executing manipulation of the argument spec can lead to files or directories accessible.
This vulnerability is registered as CVE-2025-14896. It is possible to launch the attack remotely. No exploit is available.
