A vulnerability marked as critical has been reported in tinacms up to 2.1.7. Affected by this issue is some unknown functionality of the component Endpoint. This manipulation causes path traversal.
This vulnerability is registered as CVE-2026-28793. The attack needs to be launched locally. No exploit is available.
It is suggested to upgrade the affected component.
