A vulnerability, which was classified as critical , was found in Gleam up to 1.16.x . Affected by this vulnerability is the function gleam_files of the file compiler-cli/src/fs.rs . The manipulation results in link following. This vulnerability is known as CVE-2026-42795 . Attacking locally is a requirement. No exploit is available. You should upgrade the affected component.