4 matches found
CVE-2026-116073
Leon before commit 50df142 contains a path traversal vulnerability in getModelFileNameFromURL that allows attackers to write files outside the models directory via percent-encoded separators. Attackers can trick a user into running '/download model' with a crafted URL containing encoded '../'...
CVE-2026-116073 Leon before commit 50df142 Path Traversal via /download model Command
Leon before commit 50df142 contains a path traversal vulnerability in getModelFileNameFromURL that allows attackers to write files outside the models directory via percent-encoded separators. Attackers can trick a user into running '/download model' with a crafted URL containing encoded '../'...
CVE-2026-116073
The Leon software, specifically versions prior to commit 50df142 , is vulnerable to a path traversal vulnerability (CWE-22) within the getModelFileNameFromURL() function. This flaw allows an attacker to bypass directory restrictions by using percent-encoded separators (e.g., encoded ../ sequences...
EUVD-2026-109387
Leon before commit 50df142 contains a path traversal vulnerability in getModelFileNameFromURL that allows attackers to write files outside the models directory via percent-encoded separators. Attackers can trick a user into running '/download model' with a crafted URL containing encoded '../'...