CVE-2026-45242

@@ -8,6 +8,7 @@
 
 ### Fixes
 
+- Daemon slides: ignore request-provided slide output directories and keep extracted slide artifacts under `~/.summarize/slides` (#220, thanks @Hinotoi-agent).
 - CLI progress: keep Ctrl+C responsive while spinners are active and forward interrupts to active CLI model backends so child processes are not left running (#216).
 - Codex CLI: isolate normal summary runs with `--ephemeral`, `--ignore-user-config`, `--ignore-rules`, a temporary cwd, and a sanitized temporary `CODEX_HOME` so local Codex context cannot bleed into summaries with little or no extracted content (#215, thanks @anntnzrb).
 - Daemon: write `~/.summarize/daemon.json` with owner-only permissions and tighten existing config paths before rewriting daemon tokens or captured provider env values (#214, thanks @Hinotoi-agent).

@@ -38,7 +38,11 @@ function resolveRequestSlidesSettings({
   return resolveSlideSettings({
     slides: slidesValue,
     slidesOcr: slidesOcrValue,
-    slidesDir: request.slidesDir ?? ".summarize/slides",
+    // Daemon/API callers may be browser-extension or localhost clients that
+    // only need to request extraction, not select host filesystem paths. Keep
+    // slide artifacts under the per-user Summarize directory so an authenticated
+    // request cannot write/delete slide files in arbitrary writable locations.
+    slidesDir: ".summarize/slides",
     slidesSceneThreshold: request.slidesSceneThreshold,
     slidesSceneThresholdExplicit: typeof request.slidesSceneThreshold !== "undefined",
     slidesMax: request.slidesMax,

@@ -0,0 +1,68 @@
+import type http from "node:http";
+import { Readable } from "node:stream";
+import { describe, expect, it, vi } from "vitest";
+import { parseSummarizeRequest } from "../src/daemon/server-summarize-request.js";
+
+function createJsonRequest(body: unknown): http.IncomingMessage {
+  const req = Readable.from([JSON.stringify(body)]) as http.IncomingMessage;
+  req.headers = {};
+  return req;
+}
+
+function createResponse(): http.ServerResponse {
+  return {
+    writeHead: vi.fn(),
+    end: vi.fn(),
+  } as unknown as http.ServerResponse;
+}
+
+const resolveToolPath = (binary: string) => (binary === "tesseract" ? "/usr/bin/tesseract" : null);
+
+describe("parseSummarizeRequest slides settings", () => {
+  it("keeps daemon-requested slide output under the user Summarize directory", async () => {
+    for (const slidesDir of ["/tmp/attacker-slides", "../../attacker-slides", "nested/slides"]) {
+      const parsed = await parseSummarizeRequest({
+        req: createJsonRequest({
+          url: "https://example.com/video.mp4",
+          mode: "url",
+          slides: true,
+          slidesDir,
+        }),
+        res: createResponse(),
+        cors: {},
+        env: { HOME: "/home/alice" },
+        resolveToolPath,
+      });
+
+      expect(parsed).not.toBeNull();
+      expect(parsed?.slidesSettings?.outputDir).toBe("/home/alice/.summarize/slides");
+    }
+  });
+
+  it("still honors non-path slide options from daemon requests", async () => {
+    const parsed = await parseSummarizeRequest({
+      req: createJsonRequest({
+        url: "https://example.com/video.mp4",
+        mode: "url",
+        slides: true,
+        slidesOcr: true,
+        slidesMax: 3,
+        slidesMinDuration: 4,
+        slidesSceneThreshold: 0.5,
+      }),
+      res: createResponse(),
+      cors: {},
+      env: { HOME: "/home/alice" },
+      resolveToolPath,
+    });
+
+    expect(parsed?.slidesSettings).toMatchObject({
+      enabled: true,
+      ocr: true,
+      outputDir: "/home/alice/.summarize/slides",
+      maxSlides: 3,
+      minDurationSeconds: 4,
+      sceneThreshold: 0.5,
+    });
+  });
+});