A vulnerability was found in kovidgoyal calibre up to 9.4.x. It has been classified as critical. This vulnerability affects unknown code of the file src/calibre/ebooks/rb/reader.py. This manipulation causes path traversal.
This vulnerability appears as CVE-2026-30853. The attack may be initiated remotely. There is no available exploit.
Upgrading the affected component is recommended.
