CVE-2021-29488

CVE-2021-29488 describes a path traversal vulnerability in SABnzbd, an open-source newsreader, affecting Apple, Linux, and Microsoft platforms. Malicious PAR2 files can trick the filesystem.renamer() function into writing downloaded files outside the intended download directory. The vulnerability has a CVSS score of 5.3 (Medium), indicating a network-exploitable flaw with low attack complexity and potential for unauthorized data modification. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.