Unauthenticated file disclosure via unchecked path joining

Path traversal in MoneyPrinterTurbo 1.2.0 through 1.2.6 allows remote attackers to read server files through video endpoints. The download_video and stream_video handlers join file_path directly to the task directory without canonicalizing it or verifying that the resolved path remains inside that directory. The routes have no authentication dependency, so any network client that can reach the API can retrieve files readable by the service process.