CVE-2025-6278 Upsonic server.py os.path.join path traversal

A vulnerability classified as critical was found in Upsonic up to 0.55.6. This vulnerability affects the function os.path.join of the file markdown/server.py. The manipulation of the argument file.filename leads to path traversal. The exploit has been disclosed to the public and may be used...

PT-2025-26242 · Upsonic · Upsonic

Name of the Vulnerable Software and Affected Versions: Upsonic versions up to 0.55.6 Description: A critical issue has been found in Upsonic, affecting the cloudpickle.loads function of the file /tools/add tool within the Pickle Handler component. The manipulation leads to deserialization. The...