CVE-2021-32825

CVE-2021-32825 is a critical "zipslip" vulnerability affecting bblfshd, an open-source source code parsing server, prior to commit 4265465b9b6fb5663c30ee43806126012066aad4. This flaw allows an unauthenticated attacker to achieve arbitrary file write and potentially arbitrary file read outside the designated target directory by manipulating symbolic links within a crafted archive. With a CVSS score of 9.1 (CRITICAL), the vulnerability is easily exploitable over the network with low attack complexity, leading to high impact on confidentiality and integrity. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.