CVE-2026-8736 Oinone Pamirs RestController LocalFileClient.java request.getParameter path traversal

A security flaw has been discovered in Oinone Pamirs up to 7.2.0. This vulnerability affects the function request.getParameter of the file LocalFileClient.java of the component RestController. Performing a manipulation of the argument uniqueFileName results in path traversal. The attack may be...

PT-2026-41521

A security flaw has been discovered in Oinone Pamirs up to 7.2.0. This vulnerability affects the function request.getParameter of the file LocalFileClient.java of the component RestController. Performing a manipulation of the argument uniqueFileName results in path traversal. The attack may be...

oinone-pamirs 路径遍历漏洞

Oinone-Pamirs is an open-source AI-driven low-code development framework by Oinone. Versions of Oinone-Pamirs 7.2.0 and earlier contained a path traversal vulnerability. This vulnerability stemmed from the request.getParameter function in the RestController component’s LocalFileClient.java file,...