CVE-2026-109526

The HBAI-Ltd Toonflow-app is vulnerable to an information disclosure flaw in the exportData Endpoint affecting versions up to 1.1.8 . This issue requires local access to exploit. While the exploit has been publicly disclosed, the vendor states that the current version (2.0.4 ) is not affected due...

CVE-2026-109526 HBAI-Ltd Toonflow-app exportData Endpoint information disclosure

A vulnerability has been found in HBAI-Ltd Toonflow-app up to 1.1.8. This affects an unknown function of the component exportData Endpoint. Such manipulation leads to information disclosure. An attack has to be approached locally. The exploit has been disclosed to the public and may be used...

CVE-2026-109526 HBAI-Ltd Toonflow-app exportData Endpoint information disclosure

A vulnerability has been found in HBAI-Ltd Toonflow-app up to 1.1.8. This affects an unknown function of the component exportData Endpoint. Such manipulation leads to information disclosure. An attack has to be approached locally. The exploit has been disclosed to the public and may be used...

CVE-2026-109409

A command injection vulnerability exists in the HBAI-Ltd Toonflow-app up to version 1.1.8 . The flaw is located in the child_process.exec function within the file src/routes/setting/fileManagement/openFolder.ts of the Open Folder Endpoint component. An attacker can trigger command injection by ma...

CVE-2026-7086: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was identified in HBAI-Ltd Toonflow-app up to 1.1.1. This issue affects the function updateStoryboardUrl of the file replaceUrl.ts of the component Storyboard Export. Such manipulation of the argument url leads to path traversal. It is possible to launch the attack remotely. The...

CVE-2026-7085: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was determined in HBAI-Ltd Toonflow-app up to 1.1.1. This vulnerability affects the function z.url of the file src/routes/setting/about/downloadApp.ts of the component downloadApp Endpoint. This manipulation of the argument url causes path traversal. It is possible to initiate the...

CVE-2026-7084: Server-Side Request Forgery (SSRF)

A vulnerability was found in HBAI-Ltd Toonflow-app up to 1.1.1. This affects the function fetch of the file src/routes/setting/vendorConfig/getCodeByLink.ts of the component getCodeByLink Endpoint. The manipulation of the argument Link results in server-side request forgery. The attack may be...