Executive brief
skillctl: Path traversal and symlink-follow in skillctl allow arbitrary file disclosure and deletion
Affected products
- crates.io skillctl
Junglewise Threat Intelligence
skillctl: Path traversal and symlink-follow in skillctl allow arbitrary file disclosure and deletion
Severity: medium · CVSS 4 · Published 2026-06-05
Vendors: crates.io.