CVE-2026-42866 - Tookie: Arbitrary file write via path traversal in -u username / -U userfile output filename

CVE ID :CVE-2026-42866 Published : May 11, 2026, 6:23 p.m. | 42 minutes ago Description :Tookie is a advanced OSINT information gathering tool. Prior to 4.1fix, modules/modules.py's write_txt, write_csv, write_json, and (commented-but-shipping) scan_file helpers open their output as open(f"{us