[sshrushanth-ks]

Summary

download-attachment --preserve-dir could write attachments outside --out-dir when an attacker-controlled shared-folder name was an absolute path. Validated the resolved preserved-directory path before creating directories or downloading files, and raise CommandError if it escapes the requested output directory.

Changes

• keepercommander/commands/record_edit.py: Added a containment check for preserved attachment directories, rejecting absolute paths, traversal attempts, and cross-drive paths before directory creation or file download.