Path Traversal Vulnerability in LF Edge eKuiper Plugin Endpoint

LF Edge eKuiper versions prior to 2.4.1 are affected by a path traversal vulnerability in the plugin installation endpoint, as detailed in the GitHub Security Advisory database. The issue allows privileged users or attackers with access to the management APIs to delete arbitrary files or directories on the host system. This occurs due to insufficient sanitization of user-supplied resource names in the `internal/plugin/native/manager.go` file, enabling path traversal sequences to influence the deferred cleanup operation (`os.RemoveAll`). A related issue in rule lifecycle management was also resolved by introducing unified validation mechanisms.

Operators should ensure that their deployment of eKuiper is upgraded to version 2.4.1 or later, as this release enforces input validation and file path verification to mitigate the vulnerability. Before upgrading, it is critical to assess whether the management APIs are exposed to untrusted networks or users, as this increases the risk of exploitation. Additionally, operators should review their current access controls and firewall rules for the management port (`9081`) and consider running eKuiper under a dedicated non-root user account to further limit potential damage from file deletions. This vulnerability highlights the importance of validating user input in administrative endpoints, a recurring theme across many projects.