A path traversal vulnerability (CVE-2026-5258) was discovered in Sanster IOPaint version 1.5.3. The vulnerability affects the _get_file function in the file manager component, allowing attackers to manipulate the filename argument to perform path traversal attacks. The vulnerability can be exploited remotely, and exploit code has been publicly released. The vendor was notified but did not respond to the disclosure.