A vulnerability, which was classified as problematic, has been found in kovidgoyal calibre up to 9.5.x. Affected is an unknown function. This manipulation causes relative path traversal.
This vulnerability is registered as CVE-2026-33206. The attack needs to be launched locally. No exploit is available.
It is advisable to upgrade the affected component.