SciTokens reference library version 1.9.7 and prior contains a path traversal vulnerability in the Enforcer component. Attackers can exploit this by using dot-dot (..) sequences in token scope claims to escape intended directory restrictions. The vulnerability occurs due to improper path normalization before comparison using startswith function. This allows unauthorized access to files and directories outside the intended scope. The issue has been patched in version 1.9.7 with fixes available through GitHub.