Nischoy — godoxy Verification Results

Path-Join File API Must Use Root-Constrained Open

VERIFIED

Function: Get · Z3 solved in 2.7ms

CVE-2026-33528 class: when path.Join(base, filename) uses untrusted filename, opening must be root-confined (os.OpenInRoot or equivalent). This catches sibling path traversal variants where joins exist but confinement is missing.

View SMT2 Constraints

; benchmark generated from python API
(set-info :status unknown)
(declare-fun root_confined () Int)
(assert
 (<= root_confined 1))
(assert
 (>= root_confined 1))
(assert
 (and (distinct root_confined 1) true))
(check-sat)