CVE-2026-27699 | patrickjuchli basic-ftp up to 5.1.x downloadToDir path traversal

A vulnerability was found in patrickjuchli basic-ftp up to 5.1.x and classified as critical. This affects the function downloadToDir. The manipulation results in path traversal.

This vulnerability was named CVE-2026-27699. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.