New Directory Traversal Vulnerability (CVE-2026-82460) Disclosed in Cloud Commander

A critical directory traversal vulnerability, identified as CVE-2026-82460, has been discovered in Cloud Commander versions prior to 19.20.2. The flaw exists in the application's REST file-operation and markdown endpoints due to insufficient validation of path normalization. This vulnerability allows attackers to use path traversal sequences to read, write, move, or copy files outside the configured root directory, potentially leading to unauthorized access to sensitive system files.