Limited file modification via unrestricted extension input

Path traversal in bmaltais kohya_ss allows remote attackers to modify known files through the unauthenticated Gradio GUI. The find_and_replace function accepts attacker-controlled folder_path and caption_file_ext values, enumerates matching names, then replaces chosen text and writes each file without confining the path or extension. Exploitation requires network access to an exposed Gradio interface and knowledge of existing file content; it permits targeted file changes but not arbitrary file creation.