ufm

The server implements strong sandboxing, path traversal protection, sensitive file blocking, and granular operation controls for local file system access. However, the auto-update mechanism (enabled by default) fetches version information, including checksums, over unencrypted HTTP. This makes it vulnerable to Man-in-the-Middle (MITM) attacks, where an attacker could intercept the `version.json` response, provide a malicious binary's download URL, and a matching (but fake) SHA256 checksum for that malicious binary. The client would then download and apply the malicious update, leading to arbitrary code execution. P2P connections do not currently enforce TLS, though it is planned for the future.