A vulnerability classified as critical was found in frustratedProton http-server up to 1.0. Impacted is the function RequestHandler::handleRequest of the component HTTP Request Handler. Such manipulation of the argument filename leads to path traversal.

This vulnerability is documented as CVE-2026-24469. The attack can be executed remotely. There is not any exploit available.