CVE-2026-7271

DV0x creative-ad-agent contains a path traversal vulnerability in the server component creative-ad-agent-server (file server/sdk-server.ts). Manipulating the argument req.params can be exploited remotely; exploit appears public. A rolling-release workflow means affected version details are not pu...