CVE-2026-56845 [HIGH] – An unauthenticated path traversal (LFI) vulnerability exists under /custom-sounds/ when Cu

An unauthenticated path traversal (LFI) vulnerability exists under /custom-sounds/ when CustomSounds storage is configured to FileSystem. By including ../ sequences in the request path, an attacker can read arbitrary files outside the base directory.