The File That Left the Vault

Customer success pastes a support ticket path into the knowledge base UI. The API returns a 200. The body is not a KB article — it is a file from the process working directory. Path join looked so simple.

Initial failing signal../ escapes the vault rootExpected behavior: A path outside the vault root is rejected with ValueError. · actual behavior: The escaped path succeeds and returns file contents.

Progress

1Reproduce the bugRun checks

2Edit the fixOpen

3Pass checksOpen

4Submit fixOpen

Reproduction Steps

Resolve a normal vault file.
Resolve ../secret-outside.txt.
Confirm the path escapes VAULT.
Reject any resolved path outside the vault root.

Focus Mode

Start

src/handlers.py
src/vault.py

Likely area

src/vault.py
src/handlers.py
src/config.py

Challenge Coach

Hints reveal broad direction first, then narrow toward the suspect path without showing hidden tests or exact solution code.

TopicSecurity

DifficultyMedium

Est. time18 min

Workspacepreparing

Explorer

Loading files

Evidence Map

Failing signal loaded from challenge API
Workspace files loaded from workspace API
Results rendered only after API run/submit

Autosaved

workspace

Outputread-onlyready$ prepare workspace

Preparing workspace