A vulnerability was found in Google Clasp up to 3.1.x. It has been rated as critical. Affected is an unknown function of the component Filenames Handler. The manipulation leads to path traversal.
This vulnerability is uniquely identified as CVE-2026-4092. The attack is possible to be carried out remotely. No exploit exists.
Upgrading the affected component is advised.
