CVE-2026-108940: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the function calibrationapply of the file mistralrs-server-core/src/handlers.rs. Performing a manipulation of the argument savecimatrix results in path traversal. The attack may be initiated remotely. The...

CVE-2026-108940 EricLBuehler Mistral.rs handlers.rs calibration_apply path traversal

A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the function calibrationapply of the file mistralrs-server-core/src/handlers.rs. Performing a manipulation of the argument savecimatrix results in path traversal. The attack may be initiated remotely. The...

CVE-2026-108940 EricLBuehler Mistral.rs handlers.rs calibration_apply path traversal

A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the function calibrationapply of the file mistralrs-server-core/src/handlers.rs. Performing a manipulation of the argument savecimatrix results in path traversal. The attack may be initiated remotely. The...

CVE-2026-108940 EricLBuehler Mistral.rs handlers.rs calibration_apply path traversal

A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the function calibrationapply of the file mistralrs-server-core/src/handlers.rs. Performing a manipulation of the argument savecimatrix results in path traversal. The attack may be initiated remotely. The...

CVE-2026-108940

A path traversal vulnerability exists in EricLBuehler Mistral.rs up to version 0.9.3 . The flaw is located in the calibration_apply function within mistralrs-server-core/src/handlers.rs, where a manipulation of the save_cimatrix argument allows for unauthorized file system access. This vulnerabil...