s1ko/triton-child-path-prefix-confusion
Triton core IsChildPathEscapingParentPath prefix-matches without a separator, so label_filename can read sibling model directories. Fixed in core r26.06 / server v2.70.0.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.