CVE-2026-32805 | ctfer-io romeo up to 0.2.1 Tar decoder.go sanitizeArchivePath path traversal

A vulnerability has been found in ctfer-io romeo up to 0.2.1 and classified as critical. This issue affects the function sanitizeArchivePath of the file webserver/api/v1/decoder.go of the component Tar Handler. The manipulation leads to path traversal.

This vulnerability is documented as CVE-2026-32805. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.