diff --git a/src/ai/backend/storage/api/client.py b/src/ai/backend/storage/api/client.py
index bf2ac0a671e..f9b526dc236 100644
--- a/src/ai/backend/storage/api/client.py
+++ b/src/ai/backend/storage/api/client.py
@@ -156,7 +156,7 @@ class Params(TypedDict):
                 if (dst_dir := params["dst_dir"]) is not None:
                     parent_dir = vfpath / dst_dir
                 file_path = parent_dir / token_data["relpath"]
-                file_path.relative_to(vfpath)
+                file_path.resolve().relative_to(vfpath)
                 if not file_path.exists():
                     raise FileNotFoundError
             except (ValueError, FileNotFoundError):