Roundup is susceptible to a directory traversal attack that will permit an attacker to view files outside of the web root.