5 matches found
CVE-2026-120204
DeepInfer through 0.1.0 contains a path traversal vulnerability in the unauthenticated /profile endpoint that allows remote attackers to create arbitrary directories via the outputdir parameter. Attackers, including cross-site GET requests from an operator's browser, can write chrome trace files ...
CVE-2026-120204 DeepInfer through 0.1.0 Path Traversal via /profile output_dir Parameter
DeepInfer through 0.1.0 contains a path traversal vulnerability in the unauthenticated /profile endpoint that allows remote attackers to create arbitrary directories via the outputdir parameter. Attackers, including cross-site GET requests from an operator's browser, can write chrome trace files ...
CVE-2026-120204
DeepInfer versions through 0.1.0 are vulnerable to a path traversal vulnerability in the unauthenticated /profile endpoint. The root cause is the lack of proper validation on the output_dir parameter, allowing remote attackers to create arbitrary directories. Attackers can leverage this to write ...
EUVD-2026-114725
DeepInfer through 0.1.0 contains a path traversal vulnerability in the unauthenticated /profile endpoint that allows remote attackers to create arbitrary directories via the outputdir parameter. Attackers, including cross-site GET requests from an operator's browser, can write chrome trace files ...
CVE-2026-120204: deepseek-ai DeepInfer: DeepInfer through 0.1.0 contains a path traversal vulnerability in the unauthenticated /profile endpoint that allows…
DeepInfer through 0.1.0 contains a path traversal vulnerability in the unauthenticated /profile endpoint that allows remote attackers to create arbitrary directories via the outputdir parameter. Attackers, including cross-site GET requests from an operator's browser, can write chrome trace files ...