diff --git a/basestruct/utils.cpp b/basestruct/utils.cpp
index 1a18e30..0f39896 100644
--- a/basestruct/utils.cpp
+++ b/basestruct/utils.cpp
@@ -661,6 +661,14 @@ bool Utils::kernelSupportFS(const QString &fsType)
 
 QString Utils::mkTempDir(const QString &infix)
 {
+    qDebug() << "Utils::mkTempDir - Creating temp dir with infix:" << infix;
+
+    // 路径遍历检查：拒绝包含 ".." 的 infix
+    if (infix.contains("..")) {
+        qWarning() << "Utils::mkTempDir - Invalid infix contains path traversal:" << infix;
+        return QString();
+    }
+
     // Construct template like "/var/tmp/diskmanager-XXXXXX" or "/var/tmp/diskmanager-INFIX-XXXXXX"
     QString dirTemplate = "/var/tmp/";