Unauthenticated code execution via nested attachment traversal

Path traversal in Thales CERT Suspicious 1.2.0 through 1.3.4 allows remote attackers to execute code through a crafted nested email attachment. Recursive attachment processing trusts attacker-controlled nested paths and writes their contents outside the intended analysis directory. No authentication or user interaction is required; overwritten Python modules, configuration, cron inputs, or runtime artifacts enable persistent service interruption and root-level execution inside the Django container.