Detect-It-Easy prior to 3.21 contains a path traversal vulnerability that allows attackers to write arbitrary files to the filesystem by crafting malicious arch…

Detect-It-Easy prior to version 3.21 contains a path traversal vulnerability (CVE-2026-43616) that allows attackers to write arbitrary files to the filesystem. Attackers can craft malicious archive entries with relative traversal sequences or absolute paths to exploit insufficient path normalization during archive extraction. This vulnerability enables writing files outside the intended extraction directory and can lead to persistent code execution by overwriting user startup scripts. The vulnerability has been patched in version 3.21 with multiple commits addressing the path normalization issues.