CVE-2026-11411

CVE-2026-11411 describes a path traversal flaw in iAI Lab PDF AI App 4.21.0 on Android, specifically in the chatpdf.pro component’s getExternalCacheDir function. By manipulating the _display_name argument, an attacker with local access can cause path traversal. The exploit has been released publi...

iAI Lab PDF AI: Podcast, Notes, Slides – Path traversal vulnerabilities

iAI Lab PDF AI: Podcast, Notes, Slides is an artificial intelligence-based PDF document analysis tool developed by iAI Lab. Version 4.21.0 of iAI Lab PDF AI: Podcast, Notes, Slides contains a path traversal vulnerability. This vulnerability arises from improper handling of the displayname paramet...