Plugin-Scaffolder-Backend-Module-Bitbucket-Cloud (< 0.3.10)

Authenticated users can exploit improper filesystem validation in Backstage Bitbucket scaffolder plugins to achieve unauthorized file access, modification, or deletion outside the intended working directory via CVE-2026-106486.