The following flaw was identified in the Chromium browser: directory traversal using the file scheme on android. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=586657 External References: http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html
This is android specific according to the upstream advisory. Closing as notabug.