A vulnerability was found in zarf-dev zarf up to 0.73.0. It has been rated as critical. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in path traversal.
This vulnerability was named CVE-2026-29064. The attack needs to be approached locally. There is no available exploit.
Upgrading the affected component is advised.
