Authenticated arbitrary folder deletion via path traversal

Path traversal in AnythingLLM before 1.0.0 allows remote authenticated users to recursively delete arbitrary server folders. The purgeFolder function resolves an attacker-controlled folderName and passes the resulting path to recursive fs.rmSync without verifying that it remains inside the documents directory. Access to the protected document-removal endpoint is required, and successful exploitation can erase server data outside the document store.