A path traversal vulnerability was found in WildFly Core within the ContentRepositoryImpl.copyExplodedContent function. The root cause is a missing containment check when handling deployment names, allowing an attacker to provide a specially crafted name containing path traversal sequences. An attacker authenticated with the Deployer RBAC role can exploit this flaw to escape the deployment content repository. Successful exploitation allows the attacker to perform arbitrary file system operations, such as deleting arbitrary directories and creating files with arbitrary content. This can be used to replace the management credential store, effectively escalating privileges from the Deployer role to management SuperUser.