A vulnerability described as critical has been identified in Dulwich 0.9.9/0.18.5 on Windows. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to path traversal.

This vulnerability is handled as CVE-2026-42305. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.