diff --git a/copyparty/httpcli.py b/copyparty/httpcli.py
index 8d8fdbba..eff142df 100644
--- a/copyparty/httpcli.py
+++ b/copyparty/httpcli.py
@@ -3739,7 +3739,7 @@ class HttpCli(object):
     def _mkdir(self, vpath: str, dav: bool = False) -> bool:
         nullwrite = self.args.nw
         self.gctx = vpath
-        vpath = undot(vpath)
+        vpath = sanitize_vpath(undot(vpath))
         vfs, rem = self.asrv.vfs.get(vpath, self.uname, False, True)
         if "nosub" in vfs.flags:
             raise Pebkac(403, "mkdir is forbidden below this folder")