CVE-2026-108940

A path traversal vulnerability exists in EricLBuehler Mistral.rs up to version 0.9.3 . The flaw is located in the calibration_apply function within mistralrs-server-core/src/handlers.rs, where a manipulation of the save_cimatrix argument allows for unauthorized file system access. This vulnerabil...