CVE-2026-110212

The Stonewuu ai-fusion-video application (through version 1.2.0 ) is vulnerable to a path traversal vulnerability (CWE-22) in the media upload functionality. Authenticated users can leverage the subDir parameter of the POST /api/storage/upload endpoint to write files outside the intended media di...